tree d4767fef6af388c145d0c8cc51532daa222078b7
parent 027d206b57bec59397eb6fb23f8ff4e3a2edb2e1
author William Lallemand <wlallemand@haproxy.org> 1579776172 +0100
committer William Lallemand <wlallemand@haproxy.org> 1579777059 +0100

BUG/MINOR: ssl: increment issuer refcount if in chain

When using the OCSP response, if the issuer of the response is in
the certificate chain, its address will be stored in ckch->ocsp_issuer.
However, since the ocsp_issuer could be filled by a separate file, this
pointer is free'd. The refcount of the X509 need to be incremented to
avoid a double free if we free the ocsp_issuer AND the chain.