Re: OCSP

Maja Wolniewicz wrote:

I'm getting a segmentation fault when a user certificate is verified, OCSP is switched on and OCSP responder does not set the next update. Then in src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c the OCSP_resp_find_status returns null for nextupd and ASN1_GENERALIZEDTIME_print(bio_out, nextupd) call fails causing this segmentation fault. Embedding this call with if (nextupd) {} helps.

I checked that the same issue occurs with the git version.

Thanks. I'll push a fix. Alan DeKok.