CVSROOT: /cvs
Module name: src
Changes by: patr...@cvs.openbsd.org 2017/11/08 02:33:37
Modified files:
usr.sbin/ikectl: ikeca.c
Log message:
Since r1.41 the extensions are included in the CSR. Thus ca_request()
already sets the extension values and returns. ca_sign() re-uses the
information to write out the extension file. Since ca_request() uses
strings stored on the stack, on return the pointers to those strings
will be unusable. To fix this, strdup() the strings passed ca_setenv()
so we can re-use them in another scope. And free() them when we clear
the environment in ca_clrenv().
Initial report and diff from Andrei-Marius Radu.
ok markus@
