From: W.C.A. Wijngaards <wouter@nlnetlabs.nl>
Date: Tue, 5 Sep 2023 06:46:37 +0000 (+0200)
Subject: - dnsoverquic, fix to check in doq_server_socket_create that tls-service-key
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7f65ffbf4d3808cd681d0ecc1a32f61280a30cbe;p=thirdparty%2Funbound.git

- dnsoverquic, fix to check in doq_server_socket_create that tls-service-key
  and tls-service-pem have a value.
---

diff --git a/util/netevent.c b/util/netevent.c
index 5fbe826d0..e3cdac406 100644
--- a/util/netevent.c
+++ b/util/netevent.c
@@ -2591,6 +2591,16 @@ doq_server_socket_create(struct doq_table* table, struct ub_randstate* rnd,
 	doq_socket->table = table;
 	doq_socket->rnd = rnd;
 	doq_socket->validate_addr = 1;
+	if(ssl_service_key == NULL || ssl_service_key[0]==0) {
+		log_err("doq server socket create: no tls-service-key");
+		free(doq_socket);
+		return NULL;
+	}
+	if(ssl_service_pem == NULL || ssl_service_pem[0]==0) {
+		log_err("doq server socket create: no tls-service-pem");
+		free(doq_socket);
+		return NULL;
+	}
 	doq_socket->ssl_service_key = strdup(ssl_service_key);
 	if(!doq_socket->ssl_service_key) {
 		free(doq_socket);