From b817a41afd56b1718856ed9198d3f1c5a8bfea21 Mon Sep 17 00:00:00 2001
From: Frank Wall <fw@moov.de>
Date: Wed, 15 Aug 2018 23:02:48 +0200
Subject: [PATCH] security/acme-client: fix OCSP always enabled, closes #794

---
 .../src/opnsense/scripts/OPNsense/AcmeClient/certhelper.php     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security/acme-client/src/opnsense/scripts/OPNsense/AcmeClient/certhelper.php b/security/acme-client/src/opnsense/scripts/OPNsense/AcmeClient/certhelper.php
index f1095e15f..5f56fd534 100755
--- a/security/acme-client/src/opnsense/scripts/OPNsense/AcmeClient/certhelper.php
+++ b/security/acme-client/src/opnsense/scripts/OPNsense/AcmeClient/certhelper.php
@@ -814,7 +814,7 @@ function run_acme_validation($certObj, $valObj, $acctObj)
     }
 
     // if OCSP Extension is turned on pass --ocsp parameter to acme client
-    if (isset($certObj->ocsp)) {
+    if (isset($certObj->ocsp) and ($certObj->ocsp == 1)) {
         $acme_args[] = "--ocsp";
     }