]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: ssl: porting to X509_STORE_get1_objects() 20251124-X509_STORE_get1_objects
authorWilliam Lallemand <wlallemand@irq6.net>
Mon, 24 Nov 2025 21:26:09 +0000 (22:26 +0100)
committerWilliam Lallemand <wlallemand@irq6.net>
Tue, 25 Nov 2025 19:16:43 +0000 (20:16 +0100)
commitea331b40935e0f900a9904aafd7ab8def038ded3
tree262e1ece14607933b574ab8ea0467465663605bb
parentc432d0bd6761625f64340df63a9ec5de72df191c
MEDIUM: ssl: porting to X509_STORE_get1_objects()

OpenSSL 4.0 is deprecating X509_STORE_get0_objects(). The previous patch
is implementing the get1 version using the get0 one for older versions.

Every occurence of X509_STORE_get0_objects() was replaced by
X509_STORE_get1_objects().
This changes the ref count of the STACK_OF(X509_OBJECT) everywhere, and
need it to be sk_X509_OBJECT_pop_free(objs, X509_OBJECT_free) each time.

Don't backport that unless really needed if we want to be compatible
with OpenSSL 4.0. It changes all the refcounts.
src/ssl_ckch.c
src/ssl_sock.c