[issue17123] Add OCSP support to ssl module

[Bernie Hackett]

Bernie Hackett <bernie.hackett at gmail.com> added the comment:

OCSP is the only way Let's Encrypt supports revocation. It would be really useful to have stapling verification supported in the standard library, even just the callback support PyOpenSSL supports.

https://letsencrypt.org/docs/revoking/

----------
nosy: +behackett

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue17123>
_______________________________________