Skip OCSP for LibreSSL

rmaucher · rmaucher · commit f21fb17d6a82 · 2026-01-14T11:56:31.000+01:00
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1300,7 +1300,7 @@ private static void parseOCSPURLs(Asn1Parser parser, ArrayList<String> urls) {
 
     private static int processOCSPRequest(EngineState state, URL url, MemorySegment issuer, MemorySegment x509,
             MemorySegment /* X509_STORE_CTX */ x509ctx, Arena localArena) {
-        if (openssl_h_Compatibility.BORINGSSL) {
+        if (openssl_h_Compatibility.BORINGSSL || openssl_h_Compatibility.LIBRESSL) {
             return V_OCSP_CERTSTATUS_UNKNOWN();
         }
         MemorySegment ocspRequest = MemorySegment.NULL;

Original file line number	Diff line number	Diff line change
`@@ -1300,7 +1300,7 @@ private static void parseOCSPURLs(Asn1Parser parser, ArrayList<String> urls) {`
`1300`	`1300`
`1301`	`1301`	`private static int processOCSPRequest(EngineState state, URL url, MemorySegment issuer, MemorySegment x509,`
`1302`	`1302`	`MemorySegment /* X509_STORE_CTX */ x509ctx, Arena localArena) {`
`1303`		`- if (openssl_h_Compatibility.BORINGSSL) {`
	`1303`	`+ if (openssl_h_Compatibility.BORINGSSL \|\| openssl_h_Compatibility.LIBRESSL) {`
`1304`	`1304`	`return V_OCSP_CERTSTATUS_UNKNOWN();`
`1305`	`1305`	`}`
`1306`	`1306`	`MemorySegment ocspRequest = MemorySegment.NULL;`