From 6a6fd3ac89d9090c7fa6dc959ec8540305fe71b7 Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Wed, 10 Feb 2021 03:39:23 +0100
Subject: [PATCH] ssl_send_certificate_error(): Respect HEAD requests by not
 sending a body

---
 ssl_common.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ssl_common.c b/ssl_common.c
index ac146f82..a8dd371e 100644
--- a/ssl_common.c
+++ b/ssl_common.c
@@ -405,6 +405,16 @@ extern void ssl_send_certificate_error(struct client_state *csp)
    }
    strlcat(message, message_end, message_len);
 
+   if (0 == strcmpic(csp->http->gpc, "HEAD"))
+   {
+      /* Cut off body */
+      char *header_end = strstr(message, "\r\n\r\n");
+      if (header_end != NULL)
+      {
+         header_end[3] = '\0';
+      }
+   }
+
    /*
     * Sending final message to client
     */
-- 
2.39.2