OCSP stapling: fixed using wrong responder with multiple certs.

This commit is contained in:
Maxim Dounin 2016-09-12 20:11:06 +03:00
parent 63c807fb88
commit 1bc825e2c8

View file

@ -376,6 +376,7 @@ ngx_ssl_stapling_responder(ngx_conf_t *cf, ngx_ssl_t *ssl,
{
ngx_url_t u;
char *s;
ngx_str_t rsp;
STACK_OF(OPENSSL_STRING) *aia;
if (responder->len == 0) {
@ -403,6 +404,8 @@ ngx_ssl_stapling_responder(ngx_conf_t *cf, ngx_ssl_t *ssl,
return NGX_DECLINED;
}
responder = &rsp;
responder->len = ngx_strlen(s);
responder->data = ngx_palloc(cf->pool, responder->len);
if (responder->data == NULL) {