[openssl-users] X509_STORE_free() and X509_LOOKUP_free() also frees the X509 certificates inside it

Viktor Dukhovni openssl-users at dukhovni.org
Wed Jun 10 13:15:27 UTC 2015


On Wed, Jun 10, 2015 at 04:11:45PM +0530, Thulasi Goriparthi wrote:

> Jakob is saying that if you want them to stay even after X509_STORE_free,
> explicitly increment the ref count before calling free using something like
> below.
> 
> CRYPTO_add(certificate->references, 1, CRYPTO_LOCK_X509);

That should be:

    CRYPTO_add(&certificate->references, 1, CRYPTO_LOCK_X509);

the references parameter should be a pointer.

-- 
	Viktor.


More information about the openssl-users mailing list