OpenBSD LibreSSL encryption issue vulnerability

OpenBSD LibreSSL versions 4.4.0 and earlier contain an encryption vulnerability. This vulnerability arises because url2host discards the OCSP URL scheme, and httpalloc selects TLS only for port 443, resulting in plaintext transmission. Network attackers can read the OCSP request sent to the URL o...