[sr-dev] [kamailio/kamailio] stirshaken: Properly handle intermediary/chain certificates when caching certificates (PR #3289)

mrtrev notifications at github.com
Tue Dec 6 08:55:27 CET 2022


> Correct. libstirshaken didn't make a use of xchain only after your PR

Actually before I started tinkering, it was using that code you linked to, which is why it could validate certificates the first time yet failed when they loaded from cache.  It leaks memory even when loading a certificate+intermediary the first time.  It simply leaks even more now that it can load certificate+intermediary from cache.

At any rate I have submitted https://github.com/signalwire/libstirshaken/pull/125 that will ensure xchain is cleaned up in all use cases.

All 3 of these PRs can be merged independently of each other.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/pull/3289#issuecomment-1338922260
You are receiving this because you are subscribed to this thread.

Message ID: <kamailio/kamailio/pull/3289/c1338922260 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20221205/b4f0f74f/attachment.htm>


More information about the sr-dev mailing list