--- freeradius-server-3.0.11/src/main/tls.c	2016-01-25 19:27:03.000000000 +0100
+++ freeradius-server-3.0.11.test/src/main/tls.c	2016-09-21 10:43:03.669931647 +0200
@@ -1804,7 +1804,7 @@
 
 	identity = (char **)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_IDENTITY);
 #ifdef HAVE_OPENSSL_OCSP_H
-	ocsp_store = (X509_STORE *)SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_STORE);
+	ocsp_store = conf->ocsp_store;
 #endif
 
 	talloc_ctx = SSL_get_ex_data(ssl, FR_TLS_EX_INDEX_TALLOC);
@@ -2098,7 +2098,7 @@
 		 */
 		if ((my_ok != 0)
 #ifdef HAVE_OPENSSL_OCSP_H
-		    && conf->ocsp_enable && (my_ok != OCSP_STATUS_OK) && conf->verify_skip_if_ocsp_ok
+		    && conf->ocsp_enable && !(conf->verify_skip_if_ocsp_ok)
 #endif
 			) while (conf->verify_client_cert_cmd) {
 			char filename[256];