[squid-dev] [PATCH] Segfault when freeing https_port clientca on reconfigure or exit

[Amos Jeffries]

On 12/06/2015 4:56 p.m., Alex Rousskov wrote:
> Fixed segmentation fault when freeing https_port clientca on reconfigure
> or exit.
> 
> AnyP::PortCfg::clientCA list was double-freed, because the SSL context
> takes ownership of the STACK_OF(X509_NAME) supplied via
> SSL_CTX_set_client_CA_list(), but Squid was not aware of that. Squid now
> supplies a clone of clientCA.

+1. Please apply.

Amos