Segmentation fault in X509_STORE_get_by_subject () about pam_pkcs11 HOT 4 CLOSED

I believe that the problem was due to the OpenSSL API changes mentioned elsewhere, and this never got changed. I was having the same issue and have created a patch that I believe has solved the problem. I'm new to git/github, and submitted a pull request (#26, not sure if I did it right).

This patch also fixes an issue when fetching the CRL via the internal URI library via HTTP with an extra newline (and missing carriage-returns) causing the CRL fetch to fail.

from pam_pkcs11.

With the patch in 0.6.10 cert_vfy.c failed to compile on fedora 30:

cert_vfy.c: In function ‘check_for_revocation’: cert_vfy.c:205:15: error: storage size of ‘obj’ isn’t known 205 | X509_OBJECT obj; | ^~~ cert_vfy.c:212:12: error: storage size of ‘crl_pkey’ isn’t known 212 | EVP_PKEY crl_pkey;

from pam_pkcs11.

This problem should be solved with the current code.

from pam_pkcs11.

Should be fixed in version 0.6.11

from pam_pkcs11.