]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 530408f) | patch
BUG/MEDIUM: ssl: chain must be initialized with sk_X509_new_null()
authorWilliam Lallemand <wlallemand@haproxy.com>
Thu, 27 Feb 2020 13:48:35 +0000 (14:48 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Thu, 27 Feb 2020 13:48:35 +0000 (14:48 +0100)
commit858885737c1d2672d5b1ba80a58c0bb585a0b981
treeb49a03fe297ea804f96316da99395e1e5656f6b1tree
parent530408f976e5fe2f2f2b4b733b39da36770b566fcommit | diff
BUG/MEDIUM: ssl: chain must be initialized with sk_X509_new_null()

Even when there isn't a chain, it must be initialized to a empty X509
structure with sk_X509_new_null().

This patch fixes a segfault which appears with older versions of the SSL
libs (openssl 0.9.8, libressl 2.8.3...) because X509_chain_up_ref() does
not check the pointer.

This bug was introduced by b90d2cb ("MINOR: ssl: resolve issuers chain
later").

Should fix issue #516.
src/ssl_sock.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git