Re: Issue with freeing X509

Adi Mallikarjuna Reddy V <adimallikarjunareddy@xxxxxxxxx> · Tue, 17 Oct 2017 16:08:17 +0000

Forgot to mention that the ssl_ctx is going to be used by another thread later. When I do x509_free, the handshake doesn’t finish.

I see a crash in ssl_accept.

Thanks 
Adi

On Tue, Oct 17, 2017 at 8:41 AM Benjamin Kaduk <bkaduk@xxxxxxxxxx> wrote:

    On 10/17/2017 08:39 AM, Adi Mallikarjuna Reddy V wrote:

      Hi,

        If I have an X509 object and is
          created using PEM_read_bio_X509_AUX(), then Can I free X509
          right after the completion of PEM_read_bio_X509_AUX()?

                                         BIO *cert_bio =
            BIO_new(BIO_s_mem());
                                          X509 *cert = X509_new();
                                          BIO_puts(cert_bio,
            cert_str.c_str());
                                          cert =
            PEM_read_bio_X509_AUX(cert_bio, &cert, NULL, NULL);
                                          if ( (cert != NULL)
            && SSL_CTX_use_certificate(ctx, cert) < 1) {

            SSL_CTX_free(ctx);

    Yes.

    -Ben

                                                  return NULL;
                                          }

                                          if(cert_bio !=NULL) {

            BIO_free(cert_bio);
                                          }
                                          if(cert != NULL) {
                                                  X509_free(cert);
            //is it needed?
                                          }

        Thanks
        Adi

-- 
Sent from Mobile
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users