]> git.kaiwu.me - haproxy.git/commit
MINOR: ocsp: Raise specific ocsp error code in ocsp parsing/verifying functions
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Thu, 1 Oct 2026 14:59:25 +0000 (16:59 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Fri, 2 Oct 2026 11:07:55 +0000 (13:07 +0200)
commita4d79db93814b1930ed0358a24945220ee591251
treea8d98903d29c66ae073bd7d22925bed575c6ebd5
parent1b0c58ec08a5fb35dd7c9657c8b544bbfb0b415b
MINOR: ocsp: Raise specific ocsp error code in ocsp parsing/verifying functions

Instead of relying purely on error messages, the ssl_ocsp_check_response
and ssl_sock_update_ocsp_response functions can now return custom error
codes.
They were loosely based on the new verify error codes introduced in
newer version of OpenSSL (3.6.2 for instance) but needed to be
duplicated rather than used directly because of compatibility issues
with various SSL libraries.
include/haproxy/ssl_ocsp.h
src/ssl_ocsp.c
src/ssl_sock.c