From 14f843bb2f671bbac35ac250bb8f49b3d7f7ae38 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Tue, 26 Dec 2023 20:03:14 +0100
Subject: [PATCH] System: Trust: Revocation - exclude ocsp signing certs.

---
 src/www/system_crlmanager.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/www/system_crlmanager.php b/src/www/system_crlmanager.php
index 8aa108c21..e5d1e4903 100644
--- a/src/www/system_crlmanager.php
+++ b/src/www/system_crlmanager.php
@@ -773,7 +773,11 @@ include("head.inc");
                     $ca_crl_map[$crl['caref']][] = $crl['refid'];
                 }
 
-                foreach ($a_ca as $ca) :?>
+                foreach ($a_ca as $ca) :
+                  if (($ca['x509_extensions'] ?? '') == 'ocsp') {
+                      continue;
+                  }
+                ?>
                 <tr>
                   <td colspan="4"> <?=htmlspecialchars($ca['descr']);?></td>
                   <td class="text-nowrap">