diff options
author | jsing <> | 2018-04-07 16:35:34 +0000 |
---|---|---|
committer | jsing <> | 2018-04-07 16:35:34 +0000 |
commit | fa406a4e78813492e56384a03893357a094f6793 (patch) | |
tree | 00255fc63c35caf51fe96345ab5612a005915c5f /src/lib/libssl/d1_clnt.c | |
parent | 769107a3cc2677b916ec7283d1b1c89df9fbb318 (diff) | |
download | openbsd-fa406a4e78813492e56384a03893357a094f6793.tar.gz openbsd-fa406a4e78813492e56384a03893357a094f6793.tar.bz2 openbsd-fa406a4e78813492e56384a03893357a094f6793.zip |
Correct tls_config_clear_keys() behaviour.
Previously this incorrectly called tls_keypair_clear(), which results in
the private key being cleared, along with the certificate, OCSP staple and
pubkey hash. This breaks OCSP stapling if tls_config_clear_keys() is called
following tls_configure(), as is done by httpd.
Fix this by calling tls_keypair_clear_key() so that only the private key is
cleared, leaving the other public data untouched. While here, remove
tls_keypair_clear() and fold the necessary parts into tls_keypair_free().
ok beck@
Diffstat (limited to 'src/lib/libssl/d1_clnt.c')
0 files changed, 0 insertions, 0 deletions