openbsd/src/usr.sbin/ocspcheck/http.c, branch OPENBSD_6_8_BASE

Set "Content-Type: application/ocsp-request" in ocspcheck(1)'s POSTs,

2020-01-11T17:37:19+00:00

it is required by the RFC and some CAs require it (e.g. sectigo). From daharmasterkor at gmail com, ok jca@

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:35:02+00:00

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

update for libtls default cert changes.

2018-11-29T14:25:07+00:00

bonus: this exposed a few missing const qualifiers.

Use TLS_CA_CERT_FILE instead of a separate define.

2018-11-06T20:41:11+00:00

ok beck@ bluhm@ tb@

recallocarray() for data buffer from the net.

2017-03-26T18:41:02+00:00

ok beck

Don't use from userland without cause. Sort

2017-02-03T08:08:15+00:00

before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@

netinet/in.h should be included, and freebsd and some others

2017-02-01T18:54:37+00:00

don't have EAI_NODATA, so make this easier for people from bernard spill

bring changes from acme-client over here.

2017-01-25T13:31:01+00:00

ok beck@

string terminator is called a NUL

2017-01-24T10:57:48+00:00

Yes the "if (const == val" idiom provides some safety, but it grates on

2017-01-24T10:33:16+00:00

us too much. ok beck jsing