Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-49383

Assert that Host header is present in OCSP responder

    • Type: Icon: Improvement Improvement
    • Resolution: Fixed
    • Priority: Icon: Minor - P4 Minor - P4
    • 4.4.1, 4.7.0
    • Affects Version/s: None
    • Component/s: Security
    • None
    • Fully Compatible
    • v4.4
    • Security 2020-07-13

      CDRIVER-3734 discovered that sending OCSP requests with OpenSSL's OCSP_sendreq_bio may not set the Host header. Some responders, (http://ocsp.sca1b.amazontrust.com in particular) consider it a malformed HTTP request and return a 400 response.

      I think it would be beneficial to add an assertion to the mock responder to assert that the Host header is present. Drivers will benefit from this additional test coverage since the mock responder is synced to https://github.com/mongodb-labs/drivers-evergreen-tools/blob/master/.evergreen/ocsp/mock_ocsp_responder.py

            Assignee:
            shreyas.kalyan@mongodb.com Shreyas Kalyan
            Reporter:
            kevin.albertson@mongodb.com Kevin Albertson
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: