]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: implements X509_STORE_get1_objects() for older OpenSSL versions
authorWilliam Lallemand <wlallemand@irq6.net>
Mon, 24 Nov 2025 20:44:46 +0000 (21:44 +0100)
committerWilliam Lallemand <wlallemand@irq6.net>
Tue, 25 Nov 2025 19:16:43 +0000 (20:16 +0100)
commitc432d0bd6761625f64340df63a9ec5de72df191c
tree390906ea3f382cd6511e4de08289735232a10a24
parentde29000e602bda55d32c266252ef63824e838ac0
MEDIUM: ssl: implements X509_STORE_get1_objects() for older OpenSSL versions

OpenSSL 4.0 is deprecating X509_STORE_get0_objects() and the get1
version must be used instead. Problem is the get1 alternative does not
exists in older OpenSSL versions (< 3.3). This patch implements
X509_STORE_get1_objects() using X509_STORE_get0_objects().

Note that resulting STACK_OF(X509_OBJECT) must be freed by the caller
with sk_X509_OBJECT_pop_free().
include/haproxy/openssl-compat.h