[M] Change in openvpn[master]: ssl_openssl: Fix some CRL mixups

Attention is currently required from: davidben, flichtenheld.

MaxF has posted comments on this change by davidben. ( http://gerrit.openvpn.net/c/openvpn/+/1289?usp=email )

Change subject: ssl_openssl: Fix some CRL mixups
......................................................................


Patch Set 12:

(2 comments)

Patchset:

PS12: 
This makes sense to me, but I don't know these functions in-depth. Just one question about how exactly X509_STORE_CTX_set0_crls() copies the CRLs.


File src/openvpn/ssl_openssl.c:

http://gerrit.openvpn.net/c/openvpn/+/1289/comment/c1a234c8_f81029f6?usp=email :
PS12, Line 321:     X509_STORE_CTX_set0_crls(ctx, session->opt->ssl_ctx->crls);
Does this function copy the CRLs into ctx, or a pointer to them? If it's the latter, does this modified X509_STORE_CTX continue to exist inside the SSL_CTX  after this callback? (What I'm getting at is, do we need to worry about dangling pointers if reload_crl is called?)



-- 
To view, visit http://gerrit.openvpn.net/c/openvpn/+/1289?usp=email
To unsubscribe, or for help writing mail filters, visit http://gerrit.openvpn.net/settings?usp=email

Gerrit-MessageType: comment
Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I31ac2a763209114267c35c4a9182a12d8d82f6fe
Gerrit-Change-Number: 1289
Gerrit-PatchSet: 12
Gerrit-Owner: davidben <[email protected]>
Gerrit-Reviewer: flichtenheld <[email protected]>
Gerrit-Reviewer: plaisthos <[email protected]>
Gerrit-CC: MaxF <[email protected]>
Gerrit-CC: openvpn-devel <[email protected]>
Gerrit-Attention: flichtenheld <[email protected]>
Gerrit-Attention: davidben <[email protected]>
Gerrit-Comment-Date: Wed, 15 Apr 2026 16:39:29 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No

_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel