Do not store CA cert subject

This commit is contained in:
Vladimir Dubrovin 2024-02-18 19:53:35 +03:00
parent 375e3a74d0
commit 2b4d8e67e4
3 changed files with 1 additions and 3 deletions

View File

@ -153,7 +153,7 @@ SSL_CERT ssl_copy_cert(SSL_CERT cert, SSL_CONFIG *config)
}
err = X509_set_issuer_name(dst_cert, config->name);
err = X509_set_issuer_name(dst_cert, X509_get_subject_name(config->CA_cert));
if(!err){
X509_free(dst_cert);
return NULL;

View File

@ -16,7 +16,6 @@ struct ssl_config {
X509 *CA_cert;
EVP_PKEY *CA_key;
EVP_PKEY *server_key;
X509_NAME *name;
};
typedef struct ssl_config SSL_CONFIG;

View File

@ -322,7 +322,6 @@ static void* ssl_filter_open(void * idata, struct srvparam * srv){
free(sc);
return NULL;
}
sc->name = X509_get_subject_name(sc->CA_cert);
sprintf(fname, "%.240s3proxy.key", sc->certcache);
f = BIO_new_file(fname, "rb");
if ( f != NULL ) {