mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-02-23 15:10:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

openssl: check SSL_get_peer_cert_chain return value

Browse Source 
Signed-off-by: Jean-Philippe Menil <jpmenil@gmail.com>
Closes #8579
This commit is contained in:
Jean-Philippe Menil 2022-03-10 21:32:18 +01:00 committed by Daniel Stenberg
parent e87c53d7ea
commit 680245cd39
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/vtls/openssl.c
View File

@ -1927,6 +1927,11 @@ static CURLcode verifystatus(struct Curl_easy *data,
}
ch = SSL_get_peer_cert_chain(backend->handle);
if(!ch) {
failf(data, "Could not get peer certificate chain");
result = CURLE_SSL_INVALIDCERTSTATUS;
goto end;
}
st = SSL_CTX_get_cert_store(backend->ctx);
#if ((OPENSSL_VERSION_NUMBER <= 0x1000201fL) /* Fixed after 1.0.2a */ || \