This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 1.3.x in repository https://gitbox.apache.org/repos/asf/tomcat-native.git
commit 0e4391d280e4227e47fe068191eba3ef90489ef2 Author: Mark Thomas <[email protected]> AuthorDate: Thu Dec 11 08:26:55 2025 +0000 Refactor. Remove duplication. Simplify clean-up. --- native/src/sslutils.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/native/src/sslutils.c b/native/src/sslutils.c index 3b4a6155d..6d81f5b73 100644 --- a/native/src/sslutils.c +++ b/native/src/sslutils.c @@ -1059,6 +1059,7 @@ static int ssl_ocsp_request(X509 *cert, X509 *issuer, X509_STORE_CTX *ctx) { char **ocsp_urls = NULL; int nid; + int rv = OCSP_STATUS_UNKNOWN; X509_EXTENSION *ext; ASN1_OCTET_STRING *os; apr_pool_t *p; @@ -1078,7 +1079,6 @@ static int ssl_ocsp_request(X509 *cert, X509 *issuer, X509_STORE_CTX *ctx) the ocsp status. Otherwise, return OCSP_STATUS_UNKNOWN */ if (ocsp_urls != NULL) { OCSP_RESPONSE *resp; - int rv = OCSP_STATUS_UNKNOWN; /* for the time being just check for the fist response .. a better approach is to iterate for all the possible ocsp urls */ resp = get_ocsp_response(p, cert, issuer, ocsp_urls[0]); @@ -1091,12 +1091,10 @@ static int ssl_ocsp_request(X509 *cert, X509 *issuer, X509_STORE_CTX *ctx) if (resp != NULL) { OCSP_RESPONSE_free(resp); - apr_pool_destroy(p); - return rv; } } apr_pool_destroy(p); - return OCSP_STATUS_UNKNOWN; + return rv; } #endif /* HAVE_OCSP */ --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
