summaryrefslogtreecommitdiff
path: root/src/lib/libssl/ssl_algs.c
diff options
context:
space:
mode:
authortb <>2021-11-05 21:39:45 +0000
committertb <>2021-11-05 21:39:45 +0000
commit2a0dcc649bf1b347727e4bebbf97fba6b93599aa (patch)
tree6da7a41a22a92d3e796258ed67cc392b3160ee85 /src/lib/libssl/ssl_algs.c
parent75972b6d33773b2f8f8f14548445a6ce936160f6 (diff)
downloadopenbsd-2a0dcc649bf1b347727e4bebbf97fba6b93599aa.tar.gz
openbsd-2a0dcc649bf1b347727e4bebbf97fba6b93599aa.tar.bz2
openbsd-2a0dcc649bf1b347727e4bebbf97fba6b93599aa.zip
First pass of streamlining X509_STORE_get1_{certs,crls}()
These functions are quite messy. On top of the tricky logic querying the cache, then refreshing the cache (unconditionally or not), then querying again, then extracting a list of certs/crls and bumping their refcounts, things are intermixed with locking and needlessly early allocations that then need to be cleaned up again. Use X509_STORE_CTX_get_obj_by_subject() to avoid using an object on the stack and defer allocation of the returned stack of certs to later. Flatten the logic a bit and prepare for further refactoring. ok jsing
Diffstat (limited to 'src/lib/libssl/ssl_algs.c')
0 files changed, 0 insertions, 0 deletions