diff --git a/ocsp/ocsp.go b/ocsp/ocsp.go index 68e0235..a44d750 100644 --- a/ocsp/ocsp.go +++ b/ocsp/ocsp.go @@ -261,12 +261,12 @@ type request struct { // RequestOptions contains options for constructing OCSP requests. type RequestOptions struct { // Hash contains the hash function that should be used when - // constructing the OCSP request. + // constructing the OCSP request. If zero, SHA-1 will be used. Hash crypto.Hash } func (opts *RequestOptions) hash() crypto.Hash { - if opts == nil { + if opts == nil || opts.Hash == 0 { // SHA-1 is nearly universally used in OCSP. return crypto.SHA1 }