CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/10/19 17:15:07
Modified files:
usr.sbin/ocspcheck: ocspcheck.c
Log message:
ocspcheck: reject control characters in OCSP URL
Reject OCSP URL containing non-ASCII or control characters before
using their path in an HTTP request. This prevents HTTP request
injection via a certificate's AIA URI.
ok tb@ beck@
