tree b49a03fe297ea804f96316da99395e1e5656f6b1
parent 530408f976e5fe2f2f2b4b733b39da36770b566f
author William Lallemand <wlallemand@haproxy.com> 1582811315 +0100
committer William Lallemand <wlallemand@haproxy.org> 1582811315 +0100

BUG/MEDIUM: ssl: chain must be initialized with sk_X509_new_null()

Even when there isn't a chain, it must be initialized to a empty X509
structure with sk_X509_new_null().

This patch fixes a segfault which appears with older versions of the SSL
libs (openssl 0.9.8, libressl 2.8.3...) because X509_chain_up_ref() does
not check the pointer.

This bug was introduced by b90d2cb ("MINOR: ssl: resolve issuers chain
later").

Should fix issue #516.