mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-11-15 16:01:02 +01:00
Code Issues Projects Releases Wiki Activity

BUG/MINOR: ssl: ckch->chain must be initialized

Browse Source 
It's a regression from 96a9c973 "MINOR: ssl: split
ssl_sock_load_crt_file_into_ckch()".
This commit is contained in:
Emmanuel Hocdet 2019-10-24 18:28:33 +02:00 committed by William Lallemand
parent f6ac4fa745
commit ed17f47c71
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/ssl_sock.c
View File

@ -3196,6 +3196,11 @@ static int ssl_sock_load_pem_into_ckch(const char *path, char *buf, struct cert_
goto end; goto end;
} }
/* no chain */
if (ckch->chain == NULL) {
ckch->chain = sk_X509_new_null();
}
ret = ERR_get_error(); ret = ERR_get_error();
if (ret && (ERR_GET_LIB(ret) != ERR_LIB_PEM && ERR_GET_REASON(ret) != PEM_R_NO_START_LINE)) { if (ret && (ERR_GET_LIB(ret) != ERR_LIB_PEM && ERR_GET_REASON(ret) != PEM_R_NO_START_LINE)) {
memprintf(err, "%sunable to load certificate chain from file '%s'.\n", memprintf(err, "%sunable to load certificate chain from file '%s'.\n",