nodejs
diff --git a/Collapse file
‎src/node_crypto.cc‎
Copy file name to clipboardExpand all lines: src/node_crypto.cc
+2Lines changed: 2 additions & 0 deletions b/Collapse file
‎src/node_crypto.cc‎
Copy file name to clipboardExpand all lines: src/node_crypto.cc
+2Lines changed: 2 additions & 0 deletions
diff --git a/Collapse file
‎src/node_crypto.h‎
Copy file name to clipboardExpand all lines: src/node_crypto.h
-7Lines changed: 0 additions & 7 deletions b/Collapse file
‎src/node_crypto.h‎
Copy file name to clipboardExpand all lines: src/node_crypto.h
-7Lines changed: 0 additions & 7 deletions
@@ -785,6 +785,8 @@ void SecureContext::AddRootCerts(const FunctionCallbackInfo<Value>& args) {
   }
 
   sc->ca_store_ = root_cert_store;
+  // Increment reference count so global store is not deleted along with CTX.
+  CRYPTO_add(&root_cert_store->references, 1, CRYPTO_LOCK_X509_STORE);
   SSL_CTX_set_cert_store(sc->ctx_, sc->ca_store_);
 }
 
 
@@ -140,13 +140,6 @@ class SecureContext : public BaseObject {
   void FreeCTXMem() {
     if (ctx_) {
       env()->isolate()->AdjustAmountOfExternalAllocatedMemory(-kExternalSize);
-      if (ctx_->cert_store == root_cert_store) {
-        // SSL_CTX_free() will attempt to free the cert_store as well.
-        // Since we want our root_cert_store to stay around forever
-        // we just clear the field. Hopefully OpenSSL will not modify this
-        // struct in future versions.
-        ctx_->cert_store = nullptr;
-      }
       SSL_CTX_free(ctx_);
       if (cert_ != nullptr)
         X509_free(cert_);
Original file line number	Diff line number	Diff line change
`@@ -785,6 +785,8 @@ void SecureContext::AddRootCerts(const FunctionCallbackInfo<Value>& args) {`
`785`	`785`	`}`
`786`	`786`
`787`	`787`	`sc->ca_store_ = root_cert_store;`
	`788`	`+ // Increment reference count so global store is not deleted along with CTX.`
	`789`	`+ CRYPTO_add(&root_cert_store->references, 1, CRYPTO_LOCK_X509_STORE);`
`788`	`790`	`SSL_CTX_set_cert_store(sc->ctx_, sc->ca_store_);`
`789`	`791`	`}`
`790`	`792`