database/mariadb-connector-c
1
0
Fork 0
mirror of https://github.com/mariadb-corporation/mariadb-connector-c.git synced 2025-08-08 14:02:17 +03:00
Code Activity

Don't load certificates in global context.

Browse Source
This commit is contained in:
Georg Richter
2020-09-16 07:42:06 +02:00
parent 0157f3db88
commit f885593e59
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
libmariadb/secure/openssl.c
View File

@@ -485,8 +485,10 @@ static int ma_tls_set_certs(MYSQL *mysql, SSL *ssl)
/* set cert */
if (certfile && certfile[0] != 0)
{
if (SSL_CTX_use_certificate_chain_file(ctx, certfile) != 1)
if (SSL_use_certificate_chain_file(ssl, certfile) != 1)
{
goto error;
}
}
if (keyfile && keyfile[0])
@@ -527,7 +529,8 @@ static int ma_tls_set_certs(MYSQL *mysql, SSL *ssl)
mysql->options.extension->ssl_crlpath) == 0)
goto error;
X509_STORE_set_flags(certstore, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL);
if (X509_STORE_set_flags(certstore, X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL) == 0)
goto error;
}
}
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);