summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorclaudio <claudio@openbsd.org>2021-02-09 16:55:51 +0000
committerclaudio <claudio@openbsd.org>2021-02-09 16:55:51 +0000
commitf30c50a23946819c766bded70555611e4ee7c46f (patch)
treea3da021c27ffc1d7977cd4439e70d1a9840d6977
parentsync (diff)
downloadwireguard-openbsd-f30c50a23946819c766bded70555611e4ee7c46f.tar.xz
wireguard-openbsd-f30c50a23946819c766bded70555611e4ee7c46f.zip
Walk over all results from getaddrinfo() instead of giving up after the
first entry. This way ocspcheck will try all returned IPs to contact the OCSP server. Found by the regress test and a resolv.conf file with 'family inet6 inet4'. OK kn@ deraadt@
-rw-r--r--usr.sbin/ocspcheck/ocspcheck.c3
1 files changed, 1 insertions, 2 deletions
diff --git a/usr.sbin/ocspcheck/ocspcheck.c b/usr.sbin/ocspcheck/ocspcheck.c
index dec548e0b2e..50f114f07cf 100644
--- a/usr.sbin/ocspcheck/ocspcheck.c
+++ b/usr.sbin/ocspcheck/ocspcheck.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ocspcheck.c,v 1.28 2020/10/16 01:16:55 beck Exp $ */
+/* $OpenBSD: ocspcheck.c,v 1.29 2021/02/09 16:55:51 claudio Exp $ */
/*
* Copyright (c) 2017,2020 Bob Beck <beck@openbsd.org>
@@ -113,7 +113,6 @@ host_dns(const char *s, struct addr vec[MAX_SERVERS_DNS])
dspew("DNS returns %s for %s\n", vec[vecsz].ip, s);
vecsz++;
- break;
}
freeaddrinfo(res0);