session server tls BUGFIX add missing cert check

roman · roman · commit a55fee053bc5 · 2024-03-21T16:00:48.000+01:00
diff --git a/src/session_server_tls.c b/src/session_server_tls.c
@@ -883,6 +883,11 @@ nc_tls_ctx_set_server_cert_key(SSL_CTX *tls_ctx, struct nc_server_tls_opts *opts
             return -1;
         }
     }
+    if (!cert_data || !privkey_data) {
+        ERR(NULL, "Server certificate not configured.");
+        ret = -1;
+        goto cleanup;
+    }
 
     /* load the cert */
     cert = base64der_to_cert(cert_data);

Original file line number	Diff line number	Diff line change
`@@ -883,6 +883,11 @@ nc_tls_ctx_set_server_cert_key(SSL_CTX tls_ctx, struct nc_server_tls_opts opts`
`883`	`883`	`return -1;`
`884`	`884`	`}`
`885`	`885`	`}`
	`886`	`+ if (!cert_data \|\| !privkey_data) {`
	`887`	`+ ERR(NULL, "Server certificate not configured.");`
	`888`	`+ ret = -1;`
	`889`	`+ goto cleanup;`
	`890`	`+ }`
`886`	`891`
`887`	`892`	`/* load the cert */`
`888`	`893`	`cert = base64der_to_cert(cert_data);`