summaryrefslogtreecommitdiff
path: root/redis/ocsp.py
diff options
context:
space:
mode:
Diffstat (limited to 'redis/ocsp.py')
-rw-r--r--redis/ocsp.py9
1 files changed, 7 insertions, 2 deletions
diff --git a/redis/ocsp.py b/redis/ocsp.py
index 666c7dc..4753434 100644
--- a/redis/ocsp.py
+++ b/redis/ocsp.py
@@ -56,9 +56,14 @@ def _check_certificate(issuer_cert, ocsp_bytes, validate=True):
raise AuthorizationError("you are not authorized to view this ocsp certificate")
if ocsp_response.response_status == ocsp.OCSPResponseStatus.SUCCESSFUL:
if ocsp_response.certificate_status != ocsp.OCSPCertStatus.GOOD:
- return False
+ raise ConnectionError(
+ f'Received an {str(ocsp_response.certificate_status).split(".")[1]} '
+ "ocsp certificate status"
+ )
else:
- return False
+ raise ConnectionError(
+ "failed to retrieve a sucessful response from the ocsp responder"
+ )
if ocsp_response.this_update >= datetime.datetime.now():
raise ConnectionError("ocsp certificate was issued in the future")