Check if OCSP response is valid

metsma · metsma · commit 6e090ace3db2 · 2026-05-07T08:43:58.000+03:00
IB-8891

Signed-off-by: Raul Metsma &lt;raul@metsma.ee&gt;
diff --git a/src/crypto/OCSP.cpp b/src/crypto/OCSP.cpp
@@ -92,6 +92,8 @@ OCSP::OCSP(const X509Cert &cert, const X509Cert &issuer, const std::string &user
         THROW("Failed to send OCSP request");
     const auto *p2 = (const unsigned char*)result.content.c_str();
     resp.reset(d2i_OCSP_RESPONSE(nullptr, &p2, long(result.content.size())));
+    if(!resp)
+        THROW_OPENSSLEXCEPTION("Failed to parse OCSP response.");
 
     switch(int respStatus = OCSP_response_status(resp.get()))
     {

Original file line number	Diff line number	Diff line change
`@@ -92,6 +92,8 @@ OCSP::OCSP(const X509Cert &cert, const X509Cert &issuer, const std::string &user`
`92`	`92`	`THROW("Failed to send OCSP request");`
`93`	`93`	`const auto p2 = (const unsigned char)result.content.c_str();`
`94`	`94`	`resp.reset(d2i_OCSP_RESPONSE(nullptr, &p2, long(result.content.size())));`
	`95`	`+ if(!resp)`
	`96`	`+ THROW_OPENSSLEXCEPTION("Failed to parse OCSP response.");`
`95`	`97`
`96`	`98`	`switch(int respStatus = OCSP_response_status(resp.get()))`
`97`	`99`	`{`