OSDir


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Crash with SSL renegotiations in 2.4.x branch


Hi,

there's a bug in the current 2.4.x branch of httpd which leads to crashes for SSL renegotiations.

The variable "ctx" is always NULL in ssl_engine_kernel.c, ssl_hook_Access_classic(), and it's used here:

if (!(cert_store ||
    (cert_store = SSL_CTX_get_cert_store(ctx))))
...

In trunk, this bug has been fixed in r1828793. Please backport this for 2.4.37.

Regards,
Michael