]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 297861b) | patch
OCSP: disabled handling of headers without a colon
authorVadim Zhestikov <v.zhestikov@f5.com>
Wed, 28 Oct 2026 15:55:50 +0000 (08:55 -0700)
committerVadimZhestikov <108960056+VadimZhestikov@users.noreply.github.com>
Wed, 28 Oct 2026 17:08:44 +0000 (10:08 -0700)
commit5cb1e207b1dd0ae8f061cb92170c3f0dd3f782b2
treea8df53125d18d3229b907b6dfb01b49c5218f2fetree | snapshot
parent297861bf6cdf2d3ebeddce860059ddaa20a050b2commit | diff
OCSP: disabled handling of headers without a colon

Header names not followed by a colon and a value in an OCSP responder
reply were accepted as headers with an empty value, similarly to
ngx_http_parse_header_line().  With this change, such headers are
rejected with the "OCSP responder sent invalid response" error, and the
response is not used.

The problem appeared in 74ad4494a (1.3.7).
src/event/ngx_event_openssl_stapling.c diff | blob | history
nginx upstream