summaryrefslogtreecommitdiff
path: root/src/usr.sbin/ocspcheck/http.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add missing void to definition of http_init().tb2021-09-141-2/+2
| | | | ok deraadt florian
* Remove unneeded calls to tls_init(3)kn2021-07-141-6/+1
| | | | | | | | | | | | As per the manual and lib/libtls/tls.c revision 1.79 from 2018 "Automatically handle library initialisation for libtls." initialisation is handled automatically by other tls_*(3) functions. Remove explicit tls_init() calls from base to not give the impression of it being needed. Feedback tb OK Tests mestre
* Set "Content-Type: application/ocsp-request" in ocspcheck(1)'s POSTs,sthen2020-01-111-1/+2
| | | | | it is required by the RFC and some CAs require it (e.g. sectigo). From daharmasterkor at gmail com, ok jca@
* When system calls indicate an error they return -1, not some arbitraryderaadt2019-06-281-5/+5
| | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.
* update for libtls default cert changes.tedu2018-11-291-2/+2
| | | | bonus: this exposed a few missing const qualifiers.
* Use TLS_CA_CERT_FILE instead of a separate define.jsing2018-11-061-4/+2
| | | | ok beck@ bluhm@ tb@
* recallocarray() for data buffer from the net.deraadt2017-03-261-3/+5
| | | | ok beck
* Don't use <sys/param.h> from userland without cause. Sort <sys/*>guenther2017-02-031-3/+4
| | | | | | before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@
* netinet/in.h should be included, and freebsd and some othersbeck2017-02-011-2/+3
| | | | | don't have EAI_NODATA, so make this easier for people from bernard spill
* bring changes from acme-client over here.benno2017-01-251-56/+54
| | | | ok beck@
* string terminator is called a NULderaadt2017-01-241-3/+3
|
* Yes the "if (const == val" idiom provides some safety, but it grates onderaadt2017-01-241-58/+58
| | | | | us too much. ok beck jsing
* revert accidental commit of theo diffbeck2017-01-241-58/+58
|
* Just don't bother with OpenSSL error strings, they are mostlybeck2017-01-241-58/+58
| | | | irrelevant and look gross here anyway.. we don't need them
* New ocspcheck utility to validate a certificate against its ocsp responderbeck2017-01-241-0/+782
and save the reply for stapling ok deraadt@ jsing@