commit 7550e857bf85bc169271b9edefb1e8ee04bc3042
author Jaeden Amero <jaeden.amero@arm.com> Tue Jan 28 15:55:54 2020 +0000
committer GitHub <noreply@github.com> Tue Jan 28 15:55:54 2020 +0000
tree 0f6379fdf6e0d69502f49f7fbce69c5510add51f
parent d0c25753241b0ea2b120bfa506d558f76c8c1430
parent 68a24eba000b00bedfccada89b530efc8c14a548

Merge pull request #3012 from Patater/dev/jp-bennett/development-2.16

Backport 2.16: Allow loading symlinked certificates

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index ef2e7b7..36e6393 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,11 @@
 mbed TLS ChangeLog (Sorted per branch, date)
 
+= mbed TLS 2.16.X branch released XXXX-XX-XX
+
+Bugfix
+   * Allow loading symlinked certificates. Fixes #3005. Reported and fixed
+     by Jonathan Bennett <JBennett@incomsystems.biz> via #3008.
+
 = mbed TLS 2.16.5 branch released xxxx-xx-xx
 
 Security

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index 9c2e365..a4202be 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -1366,7 +1366,7 @@
             goto cleanup;
         }
 
-        if( !S_ISREG( sb.st_mode ) )
+        if( !( S_ISREG( sb.st_mode ) || S_ISLNK( sb.st_mode ) ) )
             continue;
 
         // Ignore parse errors