openbsd/src/usr.bin/openssl/ocsp.c, branch OPENBSD_7_9_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE 2025-05-09T12:50:59+00:00 openssl ocsp: switch from X509V3error() to perror() 2025-05-09T12:50:59+00:00 tb 2025-05-09T12:50:59+00:00 urn:sha1:408ef0f57afffc0126e90e96873f2e37d00ea680 ok jsing sync x509v3_add_value with x509_utl.c 2024-08-31T18:39:25+00:00 tb 2024-08-31T18:39:25+00:00 urn:sha1:7cff01809ed1eec28d24a5246c3846d39cbe840b Add and use local copy of X509V3_add_value() 2024-08-30T17:26:44+00:00 tb 2024-08-30T17:26:44+00:00 urn:sha1:b21dd57f022de9f69eed60cf85a733806ef7e905 The public API will be removed. This fixes its only consumer. ocsp.c: zap trailing whitespace 2024-08-29T11:04:02+00:00 tb 2024-08-29T11:04:02+00:00 urn:sha1:9ddf477719bbfbb9a62ee13e5791b81e5e603323 Rename struct ${app}_config to plain cfg 2023-03-06T14:32:06+00:00 tb 2023-03-06T14:32:06+00:00 urn:sha1:2ba7dcfcbc2ef5aaeb8eb14f36f83bd57c22bcae All the structs are static and we need to reach into them many times. Having a shorter name is more concise and results in less visual clutter. It also avoids many overlong lines and we will be able to get rid of some unfortunate line wrapping down the road. Discussed with jsing Remove the legacy interactive mode from openssl(1). 2022-11-11T17:07:39+00:00 joshua 2022-11-11T17:07:39+00:00 urn:sha1:273d9e16fc9e481283c2b2302b348e4863e29f28 This removes the legacy interactive mode from openssl(1) since it is rarely used, complicates the code, and has also been removed from OpenSSL in version 3.x.x. ok tb@ jsing@ Make sure an OCSP query sends a host header 2020-10-13T18:25:35+00:00 tb 2020-10-13T18:25:35+00:00 urn:sha1:1c75dcca39cf1c20590e494e1a8c18049f973cef While OCSP uses HTTP/1.0 where a host header is optional, some widely used OCSP responders will return 400 bad request if it is missing. Add such a header unless it's already provided in the user's custom headers. OpenSSL did something similar in ff4a9394a23 and 76e0cd12f68 (both commits are under the old license) ok inoguchi set SO_REUSEADDR on the server socket when we play oscp server. 2020-10-08T23:46:57+00:00 beck 2020-10-08T23:46:57+00:00 urn:sha1:8a033220022febef2ce5c113b5e10b6b403f7cd4 ok inoguchi@ tb@ deraadt@ Wrap long lines, add space in front of goto label in openssl(1) ocsp.c 2020-09-09T13:57:36+00:00 inoguchi 2020-09-09T13:57:36+00:00 urn:sha1:d0f1d7eeb783a137afecbb1236f2e01605777cdc Change SSLv23_client_method to TLS_client_method openssl(1) ocsp 2020-09-09T13:08:38+00:00 inoguchi 2020-09-09T13:08:38+00:00 urn:sha1:cf10ba6b487773d1c43d92c59ab19861e612c6b4