summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorpatrick <patrick@openbsd.org>2017-11-15 15:45:02 +0000
committerpatrick <patrick@openbsd.org>2017-11-15 15:45:02 +0000
commit7d5c01ff620009cc76dce18880cf20c9832e541d (patch)
tree46edb309678963f2225ed31cdad113711d01fbfc
parentMakefile cleanup, avoid DNS lookups, add copyright. (diff)
downloadwireguard-openbsd-7d5c01ff620009cc76dce18880cf20c9832e541d.tar.xz
wireguard-openbsd-7d5c01ff620009cc76dce18880cf20c9832e541d.zip
Reset the OCSP URL on config reload. Otherwise we end up not being
able to disable OCSP without restarting iked. ok beck@ sthen@
-rw-r--r--sbin/iked/parse.y5
1 files changed, 4 insertions, 1 deletions
diff --git a/sbin/iked/parse.y b/sbin/iked/parse.y
index 419a5996f36..d6c48062dca 100644
--- a/sbin/iked/parse.y
+++ b/sbin/iked/parse.y
@@ -1,4 +1,4 @@
-/* $OpenBSD: parse.y,v 1.65 2017/04/24 07:07:25 reyk Exp $ */
+/* $OpenBSD: parse.y,v 1.66 2017/11/15 15:45:02 patrick Exp $ */
/*
* Copyright (c) 2010-2013 Reyk Floeter <reyk@openbsd.org>
@@ -1494,7 +1494,10 @@ parse_config(const char *filename, struct iked *x_env)
if ((file = pushfile(filename, 1)) == NULL)
return (-1);
+ free(ocsp_url);
+
decouple = passive = 0;
+ ocsp_url = NULL;
if (env->sc_opts & IKED_OPT_PASSIVE)
passive = 1;