314067655a
- update to version 5.22 New features - "OCSPaia = yes" added to the configuration file templates. - Improved double free detection. Bugfixes - Fixed a number of OCSP bugs. The most severe of those bugs caused stunnel to treat OCSP responses that failed OCSP_basic_verify() checks as if they were successful. - Fixed the passive IPv6 resolver (broken in stunnel 5.21). - Remove executable bit from sample scripts - stunnel-5.22-code11-openssl-compat.diff: Compatibility for openssl on CODE11 OBS-URL: https://build.opensuse.org/request/show/319695 OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=72
16 lines
505 B
Diff
16 lines
505 B
Diff
--- src/verify.c
|
|
+++ src/verify.c
|
|
@@ -722,12 +722,6 @@
|
|
sslerror("OCSP: OCSP_sendreq_new");
|
|
goto cleanup;
|
|
}
|
|
- if(!OCSP_REQ_CTX_add1_header(req_ctx, "Host", host)) {
|
|
- sslerror("OCSP: OCSP_REQ_CTX_add1_header");
|
|
- goto cleanup;
|
|
- }
|
|
- if(!OCSP_REQ_CTX_set1_req(req_ctx, req))
|
|
- goto cleanup;
|
|
while(OCSP_sendreq_nbio(&resp, req_ctx)==-1) {
|
|
s_poll_init(c->fds);
|
|
s_poll_add(c->fds, c->fd, BIO_should_read(bio), BIO_should_write(bio));
|