Allow loading symlinked certificates

When mbedtls_x509_crt_parse_path() checks each object in the supplied path, it only processes regular files. This change makes it also accept a symlink to a file. Fixes #3005.

This was observed to be a problem on Fedora/CentOS/RHEL systems, where the ca-bundle in the default location is actually a symlink.
This commit is contained in:
Jonathan Bennett 2020-01-24 09:12:03 -06:00 committed by Jaeden Amero
parent b0deeccc58
commit 6f45cb995b

View File

@ -1366,7 +1366,7 @@ cleanup:
goto cleanup; goto cleanup;
} }
if( !S_ISREG( sb.st_mode ) ) if( !( S_ISREG( sb.st_mode ) || S_ISLNK( sb.st_mode ) ) )
continue; continue;
// Ignore parse errors // Ignore parse errors