tree b84d171a9d308a2a172927b3a9d656aab148da88
parent 7cd0a978cc3cbfe771b6fdecdcb83ceaf09cf4a6
author Adam Langley <agl@google.com> 1485905071 -0800
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1485908664 +0000

Keep a reference to |X509|s appended to a chain.

The recent CRYPTO_BUFFER changes meant that |X509| objects passed to
SSL_CTX_add_extra_chain_cert would be |free|ed immediately. However,
some third-party code (at least serf and curl) continue to use the
|X509| even after handing over ownership.

In order to unblock things, keep the past |X509| around for a while to
paper over the issues with those libraries while we try and upstream
changes.

Change-Id: I832b458af9b265749fed964658c5c34c84d518df
Reviewed-on: https://boringssl-review.googlesource.com/13480
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>