SNOW-761217 URL Encode OCSP Requests (#1332)

snowflakedb · Apr 7, 2023 · 9832b08 · 9832b08
1 parent 127d294
commit 9832b08
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/main/java/net/snowflake/client/core/SFTrustManager.java b/src/main/java/net/snowflake/client/core/SFTrustManager.java
@@ -1116,18 +1116,18 @@ private OCSPResp fetchOcspResponse(
 
       URL url;
       if (!ocspCacheServer.new_endpoint_enabled) {
+        String urlEncodedOCSPReq = URLUtil.urlEncode(ocspReqDerBase64);
         if (SF_OCSP_RESPONSE_CACHE_SERVER_RETRY_URL_PATTERN != null) {
           URL ocspUrl = new URL(ocspUrlStr);
           url =
               new URL(
                   String.format(
                       SF_OCSP_RESPONSE_CACHE_SERVER_RETRY_URL_PATTERN,
                       ocspUrl.getHost(),
-                      ocspReqDerBase64));
+                      urlEncodedOCSPReq));
         } else {
-          url = new URL(String.format("%s/%s", ocspUrlStr, ocspReqDerBase64));
+          url = new URL(String.format("%s/%s", ocspUrlStr, urlEncodedOCSPReq));
         }
-
         LOGGER.debug("not hit cache. Fetching OCSP response from CA OCSP server. {}", url);
       } else {
         url = new URL(ocspCacheServer.SF_OCSP_RESPONSE_RETRY_URL);