-- Alexander Couzens
mail: lyn...@fe80.eu jabber: lyn...@fe80.eu mobile: +4915123277221 gpg: 390D CF78 8BF9 AA50 4F8F F1E2 C29E 9DA6 A0DF 8604
Index: bip-0.8.9/src/connection.c =================================================================== --- bip-0.8.9.orig/src/connection.c +++ bip-0.8.9/src/connection.c @@ -1322,9 +1322,14 @@ static int bip_ssl_verify_callback(int p err == X509_V_ERR_CERT_HAS_EXPIRED || err == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN)) { + xobj = X509_OBJECT_new(); + if (!xobj) { + return 0; /* fail the verification */ + } + if (X509_STORE_get_by_subject(ctx, X509_LU_X509, - X509_get_subject_name(err_cert), &xobj) > 0 && - !X509_cmp(xobj.data.x509, err_cert)) { + X509_get_subject_name(err_cert), xobj) > 0 && + !X509_cmp(X509_OBJECT_get0_X509(xobj), err_cert)) { if (err == X509_V_ERR_CERT_HAS_EXPIRED) mylog(LOG_INFO, "Basic mode; Accepting " @@ -1345,6 +1350,8 @@ static int bip_ssl_verify_callback(int p link_add_untrusted(c->user_data, X509_dup(err_cert)); } + + X509_OBJECT_free(xobj); } if (!result) {
pgpxsfIxAYVQy.pgp
Description: OpenPGP digital signature