comparison src/event/ngx_event_openssl_stapling.c @ 6491:45f2385a47e6

SSL: X509 was made opaque in OpenSSL 1.1.0. To increment reference counters we now use newly introduced X509_up_ref() function.
author Sergey Kandaurov <pluknet@nginx.com>
date Thu, 31 Mar 2016 23:38:37 +0300
parents f01ab2dbcfdc
children 458e01ef46e6
comparison
equal deleted inserted replaced
6490:ddf761495ce6 6491:45f2385a47e6
283 "SSL get issuer: %d extra certs", n); 283 "SSL get issuer: %d extra certs", n);
284 284
285 for (i = 0; i < n; i++) { 285 for (i = 0; i < n; i++) {
286 issuer = sk_X509_value(chain, i); 286 issuer = sk_X509_value(chain, i);
287 if (X509_check_issued(issuer, cert) == X509_V_OK) { 287 if (X509_check_issued(issuer, cert) == X509_V_OK) {
288 #if OPENSSL_VERSION_NUMBER >= 0x10100001L
289 X509_up_ref(issuer);
290 #else
288 CRYPTO_add(&issuer->references, 1, CRYPTO_LOCK_X509); 291 CRYPTO_add(&issuer->references, 1, CRYPTO_LOCK_X509);
292 #endif
289 293
290 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, ssl->log, 0, 294 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, ssl->log, 0,
291 "SSL get issuer: found %p in extra certs", issuer); 295 "SSL get issuer: found %p in extra certs", issuer);
292 296
293 staple->cert = cert; 297 staple->cert = cert;