[rt-commit] r192 - in /redwax-tool/trunk: ChangeLog configure.ac redwax_openssl.c

[rt-commit at redwax.eu]

Author: minfrin at redwax.eu
Date: Wed Nov  6 14:56:57 2024
New Revision: 192

Log:
The openssl verify filter was adding the leaf
certificate twice, once into the leaf
certificate store, the second into the chain.
This caused the key to be exported twice.
Fixed.

Modified:
    redwax-tool/trunk/ChangeLog
    redwax-tool/trunk/configure.ac
    redwax-tool/trunk/redwax_openssl.c

Modified: redwax-tool/trunk/ChangeLog
==============================================================================
--- redwax-tool/trunk/ChangeLog	(original)
+++ redwax-tool/trunk/ChangeLog	Wed Nov  6 14:56:57 2024
@@ -1,3 +1,11 @@
+
+Changes with v0.9.7
+
+ *) The openssl verify filter was adding the leaf
+    certificate twice, once into the leaf
+    certificate store, the second into the chain.
+    This caused the key to be exported twice.
+    Fixed. [Graham Leggett]
 
 Changes with v0.9.6
 

Modified: redwax-tool/trunk/configure.ac
==============================================================================
--- redwax-tool/trunk/configure.ac	(original)
+++ redwax-tool/trunk/configure.ac	Wed Nov  6 14:56:57 2024
@@ -2,7 +2,7 @@
 # Process this file with autoconf to produce a configure script.
 
 AC_PREREQ(2.61)
-AC_INIT(redwax-tool, 0.9.6, minfrin at sharp.fm)
+AC_INIT(redwax-tool, 0.9.7, minfrin at sharp.fm)
 AC_CONFIG_AUX_DIR(build-aux)
 AC_CONFIG_MACRO_DIRS([m4])
 AM_INIT_AUTOMAKE([dist-bzip2])

Modified: redwax-tool/trunk/redwax_openssl.c
==============================================================================
--- redwax-tool/trunk/redwax_openssl.c	(original)
+++ redwax-tool/trunk/redwax_openssl.c	Wed Nov  6 14:56:57 2024
@@ -2426,7 +2426,7 @@
                      redwax_certificate_t *chain =
                              X509_get_ex_data(x, redwax_get_x509_index());
 
-                     if (!chain) {
+                     if (j == 0) {
 
                          /* leaf cert, we're already handled above */