svn commit: r1928222 - httpd/httpd/trunk/modules/ssl

[rp...@apache.org]

Author: rpluem
Date: Thu Sep  4 06:06:15 2025
New Revision: 1928222

Log:
Perform OCSP requests via HTTP/1.1 instead of HTTP/1.0

According to https://docs.digicert.com/en/whats-new/change-log/certcentral-change-log.html#digicert-ending-support-for-http-1-0-connections-for-ocsp-and-crl-certificate-status-verification-checks-619426
Digicert stops supporting HTTP/1.0 for their OCSP responder, but still supports
HTTP/1.1. Hence switch to HTTP/1.1 to keep things working.
It is assumed that other OCSP responders support HTTP/1.1 as well.

Modified:
   httpd/httpd/trunk/modules/ssl/ssl_util_ocsp.c

Modified: httpd/httpd/trunk/modules/ssl/ssl_util_ocsp.c
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_util_ocsp.c	Thu Sep  4 04:20:02 2025	(r1928221)
+++ httpd/httpd/trunk/modules/ssl/ssl_util_ocsp.c	Thu Sep  4 06:06:15 2025	(r1928222)
@@ -46,7 +46,7 @@ static BIO *serialize_request(OCSP_REQUE
         BIO_printf(bio, "http://%s:%d",
                    uri->hostname, uri->port);
     }
-    BIO_printf(bio, "%s%s%s HTTP/1.0\r\n"
+    BIO_printf(bio, "%s%s%s HTTP/1.1\r\n"
                "Host: %s:%d\r\n"
                "Content-Type: application/ocsp-request\r\n"
                "Connection: close\r\n"