Commit 2b7efbd0 authored by Viktor Dukhovni's avatar Viktor Dukhovni
Browse files

Actually silently ignore GET / OCSP requests 



Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent cf8b3732

apps/ocsp.c

+4 −2
Original line number Diff line number Diff line
@@ -1416,9 +1416,11 @@ static int do_responder(OCSP_REQUEST **preq, BIO **pcbio, BIO *acbio, 
        *q = '\0';



        /*

         * Skip "GET / HTTP..." requests often used by load-balancers

         * Skip "GET / HTTP..." requests often used by load-balancers.  Note:

         * 'p' was incremented above to point to the first byte *after* the

         * leading slash, so with 'GET / ' it is now an empty string.

         */

        if (p[1] == '\0')

        if (p[0] == '\0')

            goto out;



        len = urldecode(p);