From: William Lallemand <wlallemand@haproxy.org>
Date: Thu, 22 Dec 2022 13:34:01 +0000 (+0100)
Subject: BUG/MINOR: ssl/ocsp: httpclient blocked when doing a GET
X-Git-Tag: v2.8-dev1~75
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=70601c56da2e720285bfe7e0159eded8168ab66b;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl/ocsp: httpclient blocked when doing a GET

When the OCSP updater uses the GET method with the payload in the URI,
the body must be set to IST_NULL, or the request won't be sent.
---

diff --git a/src/ssl_ocsp.c b/src/ssl_ocsp.c
index bd9e07667f..220776de42 100644
--- a/src/ssl_ocsp.c
+++ b/src/ssl_ocsp.c
@@ -1069,7 +1069,7 @@ static struct task *ssl_ocsp_update_responses(struct task *task, void *context,
 
 		if (httpclient_req_gen(hc, hc->req.url, hc->req.meth,
 		                       b_data(req_body) ? ocsp_request_hdrs : NULL,
-		                       ist2(b_orig(req_body), b_data(req_body))) != ERR_NONE) {
+		                       b_data(req_body) ? ist2(b_orig(req_body), b_data(req_body)) : IST_NULL) != ERR_NONE) {
 			goto leave;
 		}