Skip to content

Commit 5cec2b4

Browse files
committed
Perform OCSP requests via HTTP/1.1 instead of HTTP/1.0
According to https://docs.digicert.com/en/whats-new/change-log/certcentral-change-log.html#digicert-ending-support-for-http-1-0-connections-for-ocsp-and-crl-certificate-status-verification-checks-619426 Digicert stops supporting HTTP/1.0 for their OCSP responder, but still supports HTTP/1.1. Hence switch to HTTP/1.1 to keep things working. It is assumed that other OCSP responders support HTTP/1.1 as well. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1928222 13f79535-47bb-0310-9956-ffa450edef68
1 parent e2057d1 commit 5cec2b4

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

modules/ssl/ssl_util_ocsp.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ static BIO *serialize_request(OCSP_REQUEST *req, const apr_uri_t *uri,
4646
BIO_printf(bio, "http://%s:%d",
4747
uri->hostname, uri->port);
4848
}
49-
BIO_printf(bio, "%s%s%s HTTP/1.0\r\n"
49+
BIO_printf(bio, "%s%s%s HTTP/1.1\r\n"
5050
"Host: %s:%d\r\n"
5151
"Content-Type: application/ocsp-request\r\n"
5252
"Connection: close\r\n"

0 commit comments

Comments
 (0)