Skip to content

openssl: certinfo errors now fail correctly - #14780

Closed
bagder wants to merge 1 commit into
masterfrom
bagder/openssl-certinfo
Closed

bagder wants to merge 1 commit into
masterfrom
bagder/openssl-certinfo

Conversation

@bagder

@bagder bagder commented Sep 4, 2024 •

Copy link
Copy Markdown
Member

If there is a (memory) error when creating the certinfo data, the code would previously continue which could lead to a partial/broken response. Now, the first error aborts and cleans up the entire thing.

A certinfo "collection" error is however still not considered an error big enough to stop the handshake.

Bonus: made two functions static (and removed the Curl_ prefix) that were not used outside of openssl.c

Bonus 2: removed the unused function Curl_ossl_set_client_cert

If there is a (memory) error when creating the certinfo data, the code
would previously continue which could lead to a partial/broken response.
Now, the first error aborts and cleans up the entire thing.

A certinfo "collection" error is however still not considered an error
big enough to stop the handshake.

Bonus: made two functions static (and removed the Curl_ prefix) that
were not used outside of openssl.c
@bagder bagder added the TLS label Sep 4, 2024
@dfandrich

Copy link
Copy Markdown
Contributor

Analysis of PR #14780 at 7fd43d88:

Test 1120 failed, which has NOT been flaky recently, so there could be a real issue in the PR.

Test 1540 failed, which has NOT been flaky recently, so there could be a real issue in the PR.

Generated by Testclutch

@bagder bagder closed this in 6588a7f Sep 4, 2024
@bagder
bagder deleted the bagder/openssl-certinfo branch September 4, 2024 21:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

2 participants