> More important... there are memory leaks in OCSP as Joachim Astel
> told. I managed to reproduce the issue bombarding the OCSPd with
> OpenSSL OCSP checks.
Finally... the patch for the memory leak problem.
All OCSP replies were leaking. Added the free function.
diff -ur openca-ocspd-2.1.1/src/ocspd/response.c openca-ocspd-2.1.1.patched/src/ocspd/response.c
--- openca-ocspd-2.1.1/src/ocspd/response.c 2011-05-01 07:39:32.000000000 +0200
+++ openca-ocspd-2.1.1.patched/src/ocspd/response.c 2012-04-22 00:52:16.097208958 +0200
@@ -396,6 +396,7 @@
// in Firefox/Thunderbird OCSPs
fflush(NULL);
+ PKI_MEM_free(mem);
if ( date ) PKI_TIME_free ( date );
if ( expire ) PKI_TIME_free ( expire );
------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users
