[ovs-git] [openvswitch/ovs] 019604: stream-ssl: Replace client CA list instead of addi...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/openvswitch/ovs
  Commit: 01960474998e3002863127cda165bd5952072a4c
      https://github.com/openvswitch/ovs/commit/01960474998e3002863127cda165bd5952072a4c
  Author: Liuyongqiang (A) <liu.liuyongqiang at huawei.com>
  Date:   2015-11-24 (Tue, 24 Nov 2015)

  Changed paths:
    M lib/stream-ssl.c

  Log Message:
  -----------
  stream-ssl: Replace client CA list instead of adding to it.

SSL_CTX_add_client_CA() appends to the client CA list without replacing any
already on the list, and furthermore wastes memory if the certificate in
the file is already on the list.  This commit thus fixes an effective
memory leak.

Signed-off-by: YongQiangLiu <liu.liuyongqiang at huawei.com>
Signed-off-by: Ben Pfaff <blp at ovn.org>