Author: mdounin
Date: 2012-10-05 11:09:14 +0000 (Fri, 05 Oct 2012)
New Revision: 4888
URL: http://trac.nginx.org/nginx/changeset/4888/nginx

Log:
OCSP stapling: properly check if there is ssl.ctx.

This fixes segfault if stapling was enabled in a server without a certificate
configured (and hence no ssl.ctx).


Modified:
trunk/src/http/modules/ngx_http_ssl_module.c

Modified: trunk/src/http/modules/ngx_http_ssl_module.c
===================================================================
--- trunk/src/http/modules/ngx_http_ssl_module.c 2012-10-03 15:25:36 UTC (rev 4887)
+++ trunk/src/http/modules/ngx_http_ssl_module.c 2012-10-05 11:09:14 UTC (rev 4888)
@@ -737,7 +737,7 @@

sscf = cscfp[s]->ctx->srv_conf[ngx_http_ssl_module.ctx_index];

- if (!sscf->stapling) {
+ if (sscf->ssl.ctx == NULL || !sscf->stapling) {
continue;
}


_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel