You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2026/06/08 17:05:39 UTC
(tomcat) branch 11.0.x updated: Don't free cert for OpenSSL 1.1.x since reference count isn't increased
This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/11.0.x by this push:
new a6f89d1346 Don't free cert for OpenSSL 1.1.x since reference count isn't increased
a6f89d1346 is described below
commit a6f89d1346f74d3014bd74b75b7a81b5d466f013
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Mon Jun 8 18:05:15 2026 +0100
Don't free cert for OpenSSL 1.1.x since reference count isn't increased
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index b594b7d16a..9b9601f6d8 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1253,7 +1253,9 @@ public final class OpenSSLEngine extends SSLEngine implements SSLUtil.ProtocolIn
}
}
} finally {
- X509_free(issuer);
+ if (!openssl_h_Compatibility.OPENSSL || openssl_h_Compatibility.OPENSSL3) {
+ X509_free(issuer);
+ }
}
}
}
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org