cleanup previous ssl chain/privkey

aws · Feb 20, 2025 · dda1fc5 · dda1fc5
1 parent 88013e2
commit dda1fc5
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/ssl/ssl_cert.cc b/ssl/ssl_cert.cc
@@ -312,8 +312,14 @@ static int cert_set_chain_and_key(
   CERT_PKEY *cert_pkey = &cert->cert_private_keys[idx];
 
   // Update certificate slot index once all checks have passed.
+  if (cert_pkey->privatekey) {
+    cert_pkey->privatekey.reset();
+  }
   cert_pkey->privatekey = UpRef(privkey);
   cert->key_method = privkey_method;
+  if (cert_pkey->chain) {
+    cert_pkey->chain.reset();
+  }
   cert_pkey->chain = std::move(certs_sk);
   cert->cert_private_key_idx = idx;
   return 1;