[patch] Bugfix (clear the error queue before loading CA chains)

chain_bugfix.patch (text/plain), 958 bytes, created by Michael Kaufmann on 2018-11-02 16:23:32 UTC

(hide)

Description: Bugfix (clear the error queue before loading CA chains)

Filename:

MIME Type:

Creator: Michael Kaufmann

Created: 2018-11-02 16:23:32 UTC

Size: 958 bytes

patch

obsolete

>diff --git a/modules/ssl/ssl_engine_init.c b/modules/ssl/ssl_engine_init.c >index 654ea052a7..5179a56db7 100644 >--- a/modules/ssl/ssl_engine_init.c >+++ b/modules/ssl/ssl_engine_init.c >@@ -1063,6 +1063,9 @@ static int use_certificate_chain( > ctx->extra_certs = NULL; > } > #endif >+ >+ ERR_clear_error(); >+ > /* create new extra chain by loading the certs */ > n = 0; > while ((x509 = PEM_read_bio_X509(bio, NULL, cb, NULL)) != NULL) { >diff --git a/modules/ssl/ssl_util_ocsp.c b/modules/ssl/ssl_util_ocsp.c >index b11a6e924e..f355ac9e69 100644 >--- a/modules/ssl/ssl_util_ocsp.c >+++ b/modules/ssl/ssl_util_ocsp.c >@@ -363,6 +363,9 @@ static STACK_OF(X509) *modssl_read_ocsp_certificates(const char *file) > BIO_free(bio); > return NULL; > } >+ >+ ERR_clear_error(); >+ > /* create new extra chain by loading the certs */ > while ((x509 = PEM_read_bio_X509(bio, NULL, NULL, NULL)) != NULL) { > if (!other_certs) { View Attachment As Diff View Attachment As Raw

This is ASF Bugzilla: the Apache Software Foundation bug system. In case of problems with the functioning of ASF Bugzilla, please contact bugzilla-admin@apache.org. Please Note: this e-mail address is only for reporting problems with ASF Bugzilla. Mail about any other subject will be silently ignored.

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    Remember [x]
  • | Forgot Password
    Login: [x]