RE: CertificateExactMatch for the ldap HEAD branch (ITS#2719/ITS#2771).

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-devel@OpenLDAP.org
> [mailto:owner-openldap-devel@OpenLDAP.org]On Behalf Of Mark Ruijter

> Kurt D. Zeilenga wrote:
>
> >Mark,
> >
> >Why did you introduce dnX509normalize2()?
> >Shouldn't dnX509normalize() handle this need?

> Yes you're right. It should.
> And initially I tried to use it. But this routine is leaking memory
> somewhere...
> The nasty thing about it is that the leak makes it impossible to free
> the certificate structure in certificateExactConvert.
> X509_free(xcert); equals coredump.

Not a leak, but the opposite - a redundant free. A leak would not cause a
coredump. Now fixed in HEAD.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support