# HG changeset patch # User Maxim Dounin # Date 1473700266 -10800 # Node ID 6acbe9964cebbef35e7f5d55856cb9cd4c680c41 # Parent dfa626cdde6b9ba5c704c795697860b996b0273c OCSP stapling: fixed using wrong responder with multiple certs. diff -r dfa626cdde6b -r 6acbe9964ceb src/event/ngx_event_openssl_stapling.c --- a/src/event/ngx_event_openssl_stapling.c Mon Sep 12 18:57:42 2016 +0300 +++ b/src/event/ngx_event_openssl_stapling.c Mon Sep 12 20:11:06 2016 +0300 @@ -376,6 +376,7 @@ { ngx_url_t u; char *s; + ngx_str_t rsp; STACK_OF(OPENSSL_STRING) *aia; if (responder->len == 0) { @@ -403,6 +404,8 @@ return NGX_DECLINED; } + responder = &rsp; + responder->len = ngx_strlen(s); responder->data = ngx_palloc(cf->pool, responder->len); if (responder->data == NULL) {