openbsd/src/usr.sbin/ocspcheck/http.c, branch OPENBSD_7_9_BASE

remove duplicate includes

2023-04-19T12:58:16+00:00

The argument to ctype functions must be EOF or representable as an

2022-12-15T08:07:03+00:00

unsigned char. Casting to int is particularly useless because that's what the compiler already does. We need to prevent sign extension, not write down that we want sign extension. OK deraadt, kn, miod, op

Add missing void to definition of http_init().

2021-09-14T16:37:20+00:00

ok deraadt florian

Remove unneeded calls to tls_init(3)

2021-07-14T13:33:57+00:00

As per the manual and lib/libtls/tls.c revision 1.79 from 2018 "Automatically handle library initialisation for libtls." initialisation is handled automatically by other tls_*(3) functions. Remove explicit tls_init() calls from base to not give the impression of it being needed. Feedback tb OK Tests mestre

Set "Content-Type: application/ocsp-request" in ocspcheck(1)'s POSTs,

2020-01-11T17:37:19+00:00

it is required by the RFC and some CAs require it (e.g. sectigo). From daharmasterkor at gmail com, ok jca@

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:35:02+00:00

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

update for libtls default cert changes.

2018-11-29T14:25:07+00:00

bonus: this exposed a few missing const qualifiers.

Use TLS_CA_CERT_FILE instead of a separate define.

2018-11-06T20:41:11+00:00

ok beck@ bluhm@ tb@

recallocarray() for data buffer from the net.

2017-03-26T18:41:02+00:00

ok beck

Don't use from userland without cause. Sort

2017-02-03T08:08:15+00:00

before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@