Re: [PATCH 0/4] MR7112: crypt32, cryptnet: OCSP revocation check improvements.

[Hans Leidekker (＠hans)]

I guess you mean that the introduction of OCSP support caused the regression. Before that we would fall back to checking a cached CRL. The first version of OCSP support didn't have cache support and when it was added we didn't honor the CERT_VERIFY_CACHE_ONLY_BASED_REVOCATION flag.

Patches look good but I think this should wait until the code freeze is over.