Copy the security level stuff in ssl_cert_dup()
authortb <tb@openbsd.org>
Tue, 28 Jun 2022 20:43:21 +0000 (20:43 +0000)
committertb <tb@openbsd.org>
Tue, 28 Jun 2022 20:43:21 +0000 (20:43 +0000)
ok beck jsing sthen

lib/libssl/ssl_cert.c

index b5c9fe5..246a010 100644 (file)
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_cert.c,v 1.96 2022/06/28 20:42:22 tb Exp $ */
+/* $OpenBSD: ssl_cert.c,v 1.97 2022/06/28 20:43:21 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -253,6 +253,10 @@ ssl_cert_dup(SSL_CERT *cert)
                }
        }
 
+       ret->security_cb = cert->security_cb;
+       ret->security_level = cert->security_level;
+       ret->security_ex_data = cert->security_ex_data;
+
        /*
         * ret->extra_certs *should* exist, but currently the own certificate
         * chain is held inside SSL_CTX