Skip Menu |

This queue is for tickets about the Crypt-SSLeay CPAN distribution.

Report information
The Basics
Id: 121896
Status: new
Priority: 0/
Queue: Crypt-SSLeay

Owner: Nobody in particular
Requestors: nerdmachine [...]

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)

Subject: Null CTX causes perl to crash
Date: Thu, 25 May 2017 14:50:08 -0400
To: bug-Crypt-SSLeay [...]
From: Duane Bronson <nerdmachine [...]>
Download (untitled) / with headers
text/plain 662b
In this code, ctx could be NULL (i.e., in FIPS mode where a particular SSL version is forbidden) and should be checked before it's used: SSLeay.xs: if(ssl_version == 23) { ctx = SSL_CTX_new(SSLv23_client_method()); } else if(ssl_version == 3) { ctx = SSL_CTX_new(SSLv3_client_method()); } else { #ifndef OPENSSL_NO_SSL2 /* v2 is the default */ ctx = SSL_CTX_new(SSLv2_client_method()); #else /* v3 is the default */ ctx = SSL_CTX_new(SSLv3_client_method()); #endif } SSL_CTX_set_options(ctx,SSL_OP_ALL|0); Thanks, Duane Bronson

This service is sponsored and maintained by Best Practical Solutions and runs on infrastructure.

Please report any issues with to