feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Always free existing SSL cert to be compatible with openssl behavior

Browse Source
This commit is contained in:
Colton Willey
2024-08-15 09:24:44 -07:00
parent 65d7c6a533
commit d056b63742
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
src/ssl.c
View File

@@ -20152,10 +20152,11 @@ WOLFSSL_CTX* wolfSSL_set_SSL_CTX(WOLFSSL* ssl, WOLFSSL_CTX* ctx)
#ifndef NO_CERTS #ifndef NO_CERTS
#ifdef WOLFSSL_COPY_CERT #ifdef WOLFSSL_COPY_CERT
/* If WOLFSSL_COPY_CERT defined, make new copy of cert from ctx /* If WOLFSSL_COPY_CERT defined, always make new copy of cert from ctx */
* unless SSL object already has a cert */ if (ctx->certificate != NULL) {
if ((ctx->certificate != NULL) && if (ssl->buffers.certificate != NULL) {
(ssl->buffers.certificate == NULL)) { FreeDer(&ssl->buffers.certificate);
}
ret = AllocCopyDer(&ssl->buffers.certificate, ctx->certificate->buffer, ret = AllocCopyDer(&ssl->buffers.certificate, ctx->certificate->buffer,
ctx->certificate->length, ctx->certificate->type, ctx->certificate->length, ctx->certificate->type,
ctx->certificate->heap); ctx->certificate->heap);
@@ -20166,8 +20167,10 @@ WOLFSSL_CTX* wolfSSL_set_SSL_CTX(WOLFSSL* ssl, WOLFSSL_CTX* ctx)
ssl->buffers.weOwnCert = 1; ssl->buffers.weOwnCert = 1;
ret = WOLFSSL_SUCCESS; ret = WOLFSSL_SUCCESS;
} }
if ((ctx->certChain != NULL) && if (ctx->certChain != NULL) {
(ssl->buffers.certChain == NULL)) { if (ssl->buffers.certChain != NULL) {
FreeDer(&ssl->buffers.certChain);
}
ret = AllocCopyDer(&ssl->buffers.certChain, ctx->certChain->buffer, ret = AllocCopyDer(&ssl->buffers.certChain, ctx->certChain->buffer,
ctx->certChain->length, ctx->certChain->type, ctx->certChain->length, ctx->certChain->type,
ctx->certChain->heap); ctx->certChain->heap);