]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
BUG/MINOR: ssl/ocsp: httpclient blocked when doing a GET
authorWilliam Lallemand <wlallemand@haproxy.org>
Thu, 22 Dec 2022 13:34:01 +0000 (14:34 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Thu, 22 Dec 2022 13:41:31 +0000 (14:41 +0100)
When the OCSP updater uses the GET method with the payload in the URI,
the body must be set to IST_NULL, or the request won't be sent.

src/ssl_ocsp.c

index bd9e07667f5ef1587f0d6d131bc8185c9f8afb75..220776de4285da751a53a1ec8b36829b67034e1c 100644 (file)
@@ -1069,7 +1069,7 @@ static struct task *ssl_ocsp_update_responses(struct task *task, void *context,
 
                if (httpclient_req_gen(hc, hc->req.url, hc->req.meth,
                                       b_data(req_body) ? ocsp_request_hdrs : NULL,
-                                      ist2(b_orig(req_body), b_data(req_body))) != ERR_NONE) {
+                                      b_data(req_body) ? ist2(b_orig(req_body), b_data(req_body)) : IST_NULL) != ERR_NONE) {
                        goto leave;
                }