OCSP stapling: open ssl_stapling_file in binary-mode.

OCSP response uses the DER format and as such needs to be opened in binary-mode.
This only has any effect under Win32.
This commit is contained in:
Sergey Kandaurov 2019-04-03 15:35:39 +03:00
parent 52d9da8790
commit db5c307280

View File

@ -227,7 +227,7 @@ ngx_ssl_stapling_file(ngx_conf_t *cf, ngx_ssl_t *ssl,
return NGX_ERROR;
}
bio = BIO_new_file((char *) file->data, "r");
bio = BIO_new_file((char *) file->data, "rb");
if (bio == NULL) {
ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
"BIO_new_file(\"%s\") failed", file->data);