From bfffaa141dca3dba46988e45ad4874621bf02372 Mon Sep 17 00:00:00 2001 From: Martin Nowak Date: Sun, 10 Sep 2017 12:37:57 +0200 Subject: [PATCH] fix direct access of X509_STORE field - apparently no longer works with OpenSSL 1.1, use the proper accessor X509_STORE_CTX_get_current_cert instead --- tls/vibe/stream/openssl.d | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tls/vibe/stream/openssl.d b/tls/vibe/stream/openssl.d index 230e55f4ee..2635ffdf63 100644 --- a/tls/vibe/stream/openssl.d +++ b/tls/vibe/stream/openssl.d @@ -860,8 +860,8 @@ final class OpenSSLContext : TLSContext { case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: case X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: case X509_V_ERR_CERT_UNTRUSTED: - assert(ctx.current_cert !is null); - X509_NAME_oneline(X509_get_issuer_name(ctx.current_cert), buf.ptr, buf.length); + assert(err_cert !is null); + X509_NAME_oneline(X509_get_issuer_name(err_cert), buf.ptr, buf.length); buf[$-1] = 0; logDebug("SSL cert not trusted or unknown issuer: %s", buf.ptr.to!string); if (!(vdata.validationMode & TLSPeerValidationMode.checkTrust)) {