]> git.kaiwu.me - nginx.git/commit
OCSP stapling: check Content-Type.
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 1 Oct 2012 12:48:54 +0000 (12:48 +0000)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 1 Oct 2012 12:48:54 +0000 (12:48 +0000)
commit872563a64d8d0952a3b9f058cd763440421427c7
treeadc08c30d6a74ba0835f96a0d46f661a04b497dc
parent74ad4494a66d7ea5201c37f6628707404df723fe
OCSP stapling: check Content-Type.

This will result in better error message in case of incorrect response
from OCSP responder:

... OCSP responder sent invalid "Content-Type" header: "text/plain"
    while requesting certificate status, responder: ...

vs.

... d2i_OCSP_RESPONSE() failed (SSL:
    error:0D07209B:asn1 encoding routines:ASN1_get_object:too long
    error:0D068066:asn1 encoding routines:ASN1_CHECK_TLEN:bad object header
    error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error)
    while requesting certificate status, responder: ...
src/event/ngx_event_openssl_stapling.c