Do not store CA cert subject

This commit is contained in:
Vladimir Dubrovin 2024-02-18 19:53:35 +03:00
parent 375e3a74d0
commit 2b4d8e67e4
3 changed files with 1 additions and 3 deletions

View File

@ -153,7 +153,7 @@ SSL_CERT ssl_copy_cert(SSL_CERT cert, SSL_CONFIG *config)
} }
err = X509_set_issuer_name(dst_cert, config->name); err = X509_set_issuer_name(dst_cert, X509_get_subject_name(config->CA_cert));
if(!err){ if(!err){
X509_free(dst_cert); X509_free(dst_cert);
return NULL; return NULL;

View File

@ -16,7 +16,6 @@ struct ssl_config {
X509 *CA_cert; X509 *CA_cert;
EVP_PKEY *CA_key; EVP_PKEY *CA_key;
EVP_PKEY *server_key; EVP_PKEY *server_key;
X509_NAME *name;
}; };
typedef struct ssl_config SSL_CONFIG; typedef struct ssl_config SSL_CONFIG;

View File

@ -322,7 +322,6 @@ static void* ssl_filter_open(void * idata, struct srvparam * srv){
free(sc); free(sc);
return NULL; return NULL;
} }
sc->name = X509_get_subject_name(sc->CA_cert);
sprintf(fname, "%.240s3proxy.key", sc->certcache); sprintf(fname, "%.240s3proxy.key", sc->certcache);
f = BIO_new_file(fname, "rb"); f = BIO_new_file(fname, "rb");
if ( f != NULL ) { if ( f != NULL ) {