Feature request: add something similar to cURL's --cert-status

[Seirdy]

cURL has the ability to require and verify OCSP stapled responses with the --cert-status option. Having this feature available in xh would make it great for testing both the HTTPS and TLS setup of a server with a single request.

A similar but far more cumbersome option is the --crlfile option; stapling is a much simpler approach, IMO.

[ducaale]

The default TLS library that we are using (i.e rustls) doesn't support client-side OCSP stapling yet, see rustls/rustls#31. I also haven't figured out yet how to do OCSP in native-tls so any help would be greatly appreciated!

A similar but far more cumbersome option is the --crlfile option; stapling is a much simpler approach, IMO.

It looks like some clients have deprecated this in favour of OCSP stapling so let's focus on the latter one

[ducaale]

Note to self: Check if https://github.com/rustls/rustls-platform-verifier can be used to check certificate revocation via OCSP and CRLs.