--- tls.c.orig	2016-09-21 17:34:44.000000000 +0200
+++ tls.c	2016-09-23 15:12:12.717252747 +0200
@@ -2216,9 +2216,9 @@
 		 */
 		if ((my_ok != OCSP_STATUS_FAILED)
 #ifdef HAVE_OPENSSL_OCSP_H
-		    && conf->ocsp_enable &&
+		    && (!conf->ocsp_enable || (conf->ocsp_enable &&
 		    (((my_ok == OCSP_STATUS_OK) && !conf->verify_skip_if_ocsp_ok) ||
-		     ((my_ok == OCSP_STATUS_SKIPPED) && conf->verify_skip_if_ocsp_ok))
+		     ((my_ok == OCSP_STATUS_SKIPPED) && !conf->verify_skip_if_ocsp_ok)))
 
 #endif
 			) while (conf->verify_client_cert_cmd) {