From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 18 Dec 2017 21:07:29 +0000 (-0500)
Subject: OCSP fixes
X-Git-Tag: release_3_0_16~21
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1fc42ec77ef74a4ec03e733c3fe64169abb45272;p=thirdparty%2Ffreeradius-server.git

OCSP fixes
---

diff --git a/src/main/tls.c b/src/main/tls.c
index 2f586c0578e..e914fb2be55 100644
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -1892,6 +1892,11 @@ static ocsp_status_t ocsp_check(REQUEST *request, X509_STORE *store, X509 *issue
 		goto ocsp_end;
 	}
 	bresp = OCSP_response_get1_basic(resp);
+	if (!bresp) {
+		RDEBUG("ocsp: Failed parsing response");
+		goto ocsp_end;
+	}
+
 	if (conf->ocsp_use_nonce && OCSP_check_nonce(req, bresp)!=1) {
 		REDEBUG("ocsp: Response has wrong nonce value");
 		goto ocsp_end;