commit abfd57240cc7f0004eb513520d612dafe282dd16
author Alex Gaynor <alex.gaynor@gmail.com> Fri Aug 31 17:43:39 2018 -0500
committer Paul Kehrer <paul.l.kehrer@gmail.com> Fri Aug 31 18:43:39 2018 -0400
tree 98a590494de62c8d71020c0fbd5dbecfb48baa3b
parent c4cd5ba933d26a2602295d3de95d50585523594c

Simplify OCSP no check serialization (#4444)

src/_cffi_src/openssl/asn1.py

diff --git a/src/_cffi_src/openssl/asn1.py b/src/_cffi_src/openssl/asn1.py
index 51acf10..82bf797 100644
--- a/src/_cffi_src/openssl/asn1.py
+++ b/src/_cffi_src/openssl/asn1.py
@@ -30,6 +30,7 @@
 typedef ... ASN1_TYPE;
 typedef ... ASN1_GENERALIZEDTIME;
 typedef ... ASN1_ENUMERATED;
+typedef ... ASN1_NULL;
 
 static const int V_ASN1_GENERALIZEDTIME;
 
@@ -97,6 +98,8 @@
 
 int i2d_ASN1_TYPE(ASN1_TYPE *, unsigned char **);
 ASN1_TYPE *d2i_ASN1_TYPE(ASN1_TYPE **, const unsigned char **, long);
+
+ASN1_NULL *ASN1_NULL_new(void);
 """
 
 CUSTOMIZATIONS = """

src/cryptography/hazmat/backends/openssl/encode_asn1.py

diff --git a/src/cryptography/hazmat/backends/openssl/encode_asn1.py b/src/cryptography/hazmat/backends/openssl/encode_asn1.py
index a2c7ed7..896ea05 100644
--- a/src/cryptography/hazmat/backends/openssl/encode_asn1.py
+++ b/src/cryptography/hazmat/backends/openssl/encode_asn1.py
@@ -245,11 +245,8 @@
 
 
 def _encode_ocsp_nocheck(backend, ext):
-    """
-    The OCSP No Check extension is defined as a null ASN.1 value embedded in
-    an ASN.1 string.
-    """
-    return _encode_asn1_str_gc(backend, b"\x05\x00", 2)
+    # Doesn't need to be GC'd
+    return backend._lib.ASN1_NULL_new()
 
 
 def _encode_key_usage(backend, key_usage):