Hi,

when basic OCSP support was committed in 2014, a bit of code was
forgotten that resets the OCSP URL back to NULL on config reload.
Otherwise we end up not being able to disable OCSP with a config
change and reload.

ok?

Patrick

diff --git a/sbin/iked/parse.y b/sbin/iked/parse.y
index 419a5996f36..9b2ab654470 100644
--- a/sbin/iked/parse.y
+++ b/sbin/iked/parse.y
@@ -1494,7 +1494,10 @@ parse_config(const char *filename, struct iked *x_env)
        if ((file = pushfile(filename, 1)) == NULL)
                return (-1);
 
+       free(ocsp_url);
+
        decouple = passive = 0;
+       ocsp_url = NULL;
 
        if (env->sc_opts & IKED_OPT_PASSIVE)
                passive = 1;

Reply via email to