stream-ssl: Replace client CA list instead of adding to it.
authorLiuyongqiang (A) <liu.liuyongqiang@huawei.com>
Mon, 9 Nov 2015 02:37:40 +0000 (02:37 +0000)
committerBen Pfaff <blp@ovn.org>
Wed, 25 Nov 2015 04:08:28 +0000 (20:08 -0800)
commit01960474998e3002863127cda165bd5952072a4c
treeb83a02916cf062484e3fe2446f8f049b588458cc
parent0e27c629d472da40e108a79dce3343e3ac7f54cd
stream-ssl: Replace client CA list instead of adding to it.

SSL_CTX_add_client_CA() appends to the client CA list without replacing any
already on the list, and furthermore wastes memory if the certificate in
the file is already on the list.  This commit thus fixes an effective
memory leak.

Signed-off-by: YongQiangLiu <liu.liuyongqiang@huawei.com>
Signed-off-by: Ben Pfaff <blp@ovn.org>
lib/stream-ssl.c