http*: copy string returned by sha1_to_hex