Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-10 09:40:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow loading symlinked certificates

Browse Source 
When mbedtls_x509_crt_parse_path() checks each object in the supplied path, it only processes regular files. This change makes it also accept a symlink to a file. Fixes #3005.

This was observed to be a problem on Fedora/CentOS/RHEL systems, where the ca-bundle in the default location is actually a symlink.
This commit is contained in:
Jonathan Bennett
2020-03-13 15:37:54 +00:00
committed by Simon Butcher
parent 0f14c15842
commit b9082ed820
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
library/x509_crt.c
+1 -1
View File
@@ -2023,7 +2023,7 @@ cleanup:
goto cleanup;
}
if( !S_ISREG( sb.st_mode ) )
if( !( S_ISREG( sb.st_mode ) || S_ISLNK( sb.st_mode ) ) )
continue;
// Ignore parse errors