Use 32 byte nonce in OCSP request

Lauris Kaplinski · mrts · commit ce6a44b3de77 · 2023-12-02T00:37:39.000+02:00
diff --git a/src/validator/ocsp/OcspRequestBuilder.php b/src/validator/ocsp/OcspRequestBuilder.php
@@ -61,7 +61,7 @@ public function build(): OcspRequest
         $ocspRequest->addCertificateId($this->certificateId);
 
         if ($this->ocspNonceEnabled) {
-            $nonceBytes = call_user_func($this->secureRandom, 8);
+            $nonceBytes = call_user_func($this->secureRandom, 32);
             $ocspRequest->addNonceExtension($nonceBytes);
         }
 

Original file line number	Diff line number	Diff line change
`@@ -61,7 +61,7 @@ public function build(): OcspRequest`
`61`	`61`	`$ocspRequest->addCertificateId($this->certificateId);`
`62`	`62`
`63`	`63`	`if ($this->ocspNonceEnabled) {`
`64`		`- $nonceBytes = call_user_func($this->secureRandom, 8);`
	`64`	`+ $nonceBytes = call_user_func($this->secureRandom, 32);`
`65`	`65`	`$ocspRequest->addNonceExtension($nonceBytes);`
`66`	`66`	`}`
`67`	`67`