Skip to content

Getting null cert and null issuer in OCSPRequest which leads to crash #6822

@Rush

Description

@Rush

Version: at least 4.x to 6.1.0
Platform: Linux
Subsystem: tls

server.on('OCSPRequest', function(cert, issuer, cb) {

When I debug the data here, I get cert === null and issuer === null. If I do cb(null, null); then I get a crash:

Error: error:140C6043:SSL routines:SSL_use_certificate:passed a null parameter
at Error (native)
  at _tls_wrap.js:174:20
  at onOCSP (_tls_wrap.js:143:5)
  at Server.<anonymous> (/opt/virtkick/src/node_modules/http-master/src/HttpMasterWorker.js:249:16)
  at emitThree (events.js:116:13)
  at Server.emit (events.js:194:7)
  at requestOCSP (_tls_wrap.js:123:17)
  at _tls_wrap.js:167:5
  at _tls_wrap.js:106:5
  at TLSSocket.sniCallback [as _SNICallback] (/opt/virtkick/src/node_modules/http-master/src/HttpMasterWorker.js:73:20)
  at loadSNI (_tls_wrap.js:91:8)

Sorry, I don't have a test case and cannot share my letsencrypt certificate here. @indutny - any ideas what's happening or if the problem is somehow on my end?

Metadata

Metadata

Assignees

No one assigned

    Labels

    tlsIssues and PRs related to the tls subsystem.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions