openssl ca: avoid double free for spkac files without default section

ok jsing

1 files changed, 1 insertions, 2 deletions

diff --git a/src/usr.bin/openssl/ca.c b/src/usr.bin/openssl/ca.c
index 6fedd22c95..c0e011e7ad 100644
--- a/src/usr.bin/openssl/ca.c
+++ b/src/usr.bin/openssl/ca.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ca.c,v 1.58 2024/02/04 13:08:29 tb Exp $ */
+/* $OpenBSD: ca.c,v 1.59 2024/06/23 07:50:52 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -2330,7 +2330,6 @@ certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
         if (sk_CONF_VALUE_num(sk) == 0) {
                 BIO_printf(bio_err, "no name/value pairs found in %s\n",
                     infile);
-                CONF_free(parms);
                 goto err;
         }
         /*