Skip to content

Getting null cert and null issuer in OCSPRequest which leads to crash #6822

Description

@Rush

Version: at least 4.x to 6.1.0
Platform: Linux
Subsystem: tls

server.on('OCSPRequest', function(cert, issuer, cb) {

When I debug the data here, I get cert === null and issuer === null. If I do cb(null, null); then I get a crash:

Error: error:140C6043:SSL routines:SSL_use_certificate:passed a null parameter
at Error (native)
  at _tls_wrap.js:174:20
  at onOCSP (_tls_wrap.js:143:5)
  at Server.<anonymous> (/opt/virtkick/src/node_modules/http-master/src/HttpMasterWorker.js:249:16)
  at emitThree (events.js:116:13)
  at Server.emit (events.js:194:7)
  at requestOCSP (_tls_wrap.js:123:17)
  at _tls_wrap.js:167:5
  at _tls_wrap.js:106:5
  at TLSSocket.sniCallback [as _SNICallback] (/opt/virtkick/src/node_modules/http-master/src/HttpMasterWorker.js:73:20)
  at loadSNI (_tls_wrap.js:91:8)

Sorry, I don't have a test case and cannot share my letsencrypt certificate here. @indutny - any ideas what's happening or if the problem is somehow on my end?

Metadata

Metadata

Assignees

No one assigned

    Labels

    tlsIssues and PRs related to the tls subsystem.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions