You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by dr...@apache.org on 2012/02/08 22:02:21 UTC
svn commit: r1242089 - /httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
Author: druggeri
Date: Wed Feb 8 21:02:20 2012
New Revision: 1242089
URL: http://svn.apache.org/viewvc?rev=1242089&view=rev
Log:
Add cleanup for SSLProxyMachineCertificateChainFile during init
Modified:
httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
Modified: httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_engine_init.c?rev=1242089&r1=1242088&r2=1242089&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_engine_init.c (original)
+++ httpd/httpd/trunk/modules/ssl/ssl_engine_init.c Wed Feb 8 21:02:20 2012
@@ -1636,6 +1636,17 @@ static void ssl_init_ctx_cleanup_proxy(m
ssl_init_ctx_cleanup(mctx);
if (mctx->pkp->certs) {
+ int i = 0;
+ int ncerts = sk_X509_INFO_num(mctx->pkp->certs);
+
+ if (mctx->pkp->ca_certs) {
+ for (i = 0; i < ncerts; i++) {
+ if (mctx->pkp->ca_certs[i] != NULL) {
+ sk_X509_pop_free(mctx->pkp->ca_certs[i], X509_free);
+ }
+ }
+ }
+
sk_X509_INFO_pop_free(mctx->pkp->certs, X509_INFO_free);
mctx->pkp->certs = NULL;
}