NEWS

@@ -3,6 +3,15 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2016 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
+* Version 3.3.26 (unreleased)
+
+** libgnutls: Handle status request responses as optional (following
+   RFC6066).
+
+** API and ABI modifications:
+No changes since last version.
+
+
 * Version 3.3.25 (released 2016-10-9)
 
 ** libgnutls: Ensure proper cleanups on gnutls_certificate_set_*key()

lib/ext/status_request.c

@@ -595,7 +595,7 @@ int _gnutls_recv_server_certificate_status(gnutls_session_t session)
 
 	ret = _gnutls_recv_handshake(session,
 				     GNUTLS_HANDSHAKE_CERTIFICATE_STATUS,
-				     0, &buf);
+				     1, &buf);
 	if (ret < 0)
 		return gnutls_assert_val_fatal(ret);