CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/16 00:18:23
Modified files:
usr.sbin/ocspcheck: http.h http.c ocspcheck.c
Log message:
ocspcheck: select TLS based on the OCSP URL scheme
Preserve the URL scheme when parsing the OCSP responder address and pass
it to the HTTP client. Previously, the client selected TLS only when
the port was 443, so an https:// URL with a different port sent the
OCSP request in cleartext.
Use the scheme for the verbose connection message as well.
Reported by Aziz ELBELAYCHY
ok tb@
