Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/21086)
if (ctx->certOut != NULL
&& (*certOut = X509_dup(ctx->certOut)) == NULL)
- /* Should better return a cert produced from data in request template */
+ /* Should return a cert produced from request template, see FR #16054 */
goto err;
if (ctx->chainOut != NULL
&& (*chainOut = X509_chain_up_ref(ctx->chainOut)) == NULL)