The following one line change to 0.9.7 stable crypto/pem/pem_info.c
line 114 fixes a problem with the loading of certificate and crl files
when there is more than a single error on the error stack.

crypto/pem/pem_info.c line 114:
!                       error=ERR_GET_REASON(ERR_peek_error());
----
!                       error=ERR_GET_REASON(ERR_peek_last_error());


Without this change, when there is more than a single error on the
stack the error returned is the first error placed on the stack which
is not going to be the PEM_R_NO_START_LINE error added during the
PEM_read_bio() call.

This bug is triggered when several verification files are read in
succession without clearing the error stack.




 Jeffrey Altman * Sr.Software Designer      C-Kermit 8.0 available now!!!
 The Kermit Project @ Columbia University   includes Telnet, FTP and HTTP
 http://www.kermit-project.org/             secured with Kerberos, SRP, and 
 [EMAIL PROTECTED]                OpenSSL. Interfaces with OpenSSH
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to