commit c0c92fea3d105519a03a0cd1c5aa9f4f6093ab08
author Jaeden Amero <jaeden.amero@arm.com> Tue Jan 28 15:55:33 2020 +0000
committer GitHub <noreply@github.com> Tue Jan 28 15:55:33 2020 +0000
tree baffd6715223deb8ff17f4d1e79de3372169854b
parent bfc73bcfd2585311c8e671e0817045a95628c6fd
parent 62236d7651b4993a09a487996de2db22c63420bb

Merge pull request #3008 from jp-bennett/development

Allow loading symlinked certificates

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index be6b5d7..17d2aae 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,11 @@
 mbed TLS ChangeLog (Sorted per branch, date)
 
+= mbed TLS X.X.X branch released XXXX-XX-XX
+
+Bugfix
+   * Allow loading symlinked certificates. Fixes #3005. Reported and fixed
+     by Jonathan Bennett <JBennett@incomsystems.biz> via #3008.
+
 = mbed TLS 2.20.0 branch released 2020-01-15
 
 Default behavior changes

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index 38e69cc..ca60011 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -1613,7 +1613,7 @@
             goto cleanup;
         }
 
-        if( !S_ISREG( sb.st_mode ) )
+        if( !( S_ISREG( sb.st_mode ) || S_ISLNK( sb.st_mode ) ) )
             continue;
 
         // Ignore parse errors