From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 20 Jan 2021 14:52:33 +0000 (+0100)
Subject: vici: Fix refcount for CA certificates when reloading authority sections
X-Git-Tag: 5.9.2dr2~13
X-Git-Url: https://git.strongswan.org/?p=strongswan.git;a=commitdiff_plain;h=4525233b1e27fc7f913e379caa96e53f753269e9

vici: Fix refcount for CA certificates when reloading authority sections

Fixes: 3c5e7eaa88b0 ("vici: Keep track of all CA certificates in vici_authority_t")
---

diff --git a/src/libcharon/plugins/vici/vici_authority.c b/src/libcharon/plugins/vici/vici_authority.c
index 08f6ce5..fac9f61 100644
--- a/src/libcharon/plugins/vici/vici_authority.c
+++ b/src/libcharon/plugins/vici/vici_authority.c
@@ -547,6 +547,8 @@ CALLBACK(authority_sn, bool,
 		{
 			/* remove the old authority definition */
 			authorities->remove_at(authorities, enumerator);
+			request->this->certs->remove(request->this->certs, authority->cert,
+										 remove_cert);
 			authority_destroy(authority);
 			break;
 		}