[openssl/openssl] ebb515: Skip parsing OCSP status_request when no status ca...

[bso-netflix]

Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: ebb51594d1bbcf9ead93ec42cef4ceb9b2f98dba
https://github.com/openssl/openssl/commit/ebb51594d1bbcf9ead93ec42cef4ceb9b2f98dba
Author: Brenda So <b...@netflix.com>
Date: 2026-04-13 (Mon, 13 Apr 2026)

Changed paths:
M ssl/statem/extensions_srvr.c

Log Message:
-----------
Skip parsing OCSP status_request when no status call is registered

When no ext.status_cb is set, the server will not produce a stapled
OCSP response. This patch returns early from tls_parse_ctos_status_request
before parsing the extension body to save memory.

Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
MergeDate: Mon Apr 13 09:40:08 2026
(Merged from https://github.com/openssl/openssl/pull/30630)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications