diff options
| author | Greg Hudson <ghudson@mit.edu> | 2014-03-24 22:42:02 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2014-03-25 17:53:00 -0400 |
| commit | 6b9e570a7e98470b806a26c5119e53b2145e2586 (patch) | |
| tree | ce7511df9a3b000333822339deeda9a25ffde37b /src/plugins/locate/python/python.exports | |
| parent | 8ee1790ba6e3468d7ed53ed46123dc9545a4216f (diff) | |
| download | krb5-6b9e570a7e98470b806a26c5119e53b2145e2586.tar.gz krb5-6b9e570a7e98470b806a26c5119e53b2145e2586.tar.xz krb5-6b9e570a7e98470b806a26c5119e53b2145e2586.zip | |
Use anonymous OIDs in pkinit_crypto_openssl.c
Stop adding OIDs to the global OpenSSL table. It isn't thread-safe
(even with locking callbacks registered), and calling OBJ_cleanup
could break other uses of OpenSSL. Instead, use anonymous OIDs
created with OBJ_txt2oid. Anonymous OIDs need to be managed more
careful to avoid double-freeing, so create a copy before calling
PKCS7_add_signed_attribute, and don't free the result of
pkinit_pkcs7type2oid in cms_contentinfo_create.
ticket: 7889
Diffstat (limited to 'src/plugins/locate/python/python.exports')
0 files changed, 0 insertions, 0 deletions
