aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorMaxim Dounin <mdounin@mdounin.ru>2012-10-05 11:09:14 +0000
committerMaxim Dounin <mdounin@mdounin.ru>2012-10-05 11:09:14 +0000
commit0d7a7e91cf57981e89dafb44794dcb9563e8a3fa (patch)
tree4f9c2235a1f695d19b3b583fee34b4d43a6546db /src
parent82989420adcf0cb4e0f00e5f689cb59554e4c24c (diff)
downloadnginx-0d7a7e91cf57981e89dafb44794dcb9563e8a3fa.tar.gz
nginx-0d7a7e91cf57981e89dafb44794dcb9563e8a3fa.zip
OCSP stapling: properly check if there is ssl.ctx.
This fixes segfault if stapling was enabled in a server without a certificate configured (and hence no ssl.ctx).
Diffstat (limited to 'src')
-rw-r--r--src/http/modules/ngx_http_ssl_module.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/http/modules/ngx_http_ssl_module.c b/src/http/modules/ngx_http_ssl_module.c
index 284edd002..62882838d 100644
--- a/src/http/modules/ngx_http_ssl_module.c
+++ b/src/http/modules/ngx_http_ssl_module.c
@@ -737,7 +737,7 @@ ngx_http_ssl_init(ngx_conf_t *cf)
sscf = cscfp[s]->ctx->srv_conf[ngx_http_ssl_module.ctx_index];
- if (!sscf->stapling) {
+ if (sscf->ssl.ctx == NULL || !sscf->stapling) {
continue;
}