From a35f44242c832a478373d4b9e7fc5c9119c07090 Mon Sep 17 00:00:00 2001 From: beck <> Date: Mon, 30 May 2016 13:42:54 +0000 Subject: deprecate internal use of EVP_[Cipher|Encrypt|Decrypt]_Final. 14 years ago these were changed in OpenSSL to be the same as the _ex functions. We use the _ex functions only internally to ensure it is obvious the ctx must be cleared. ok bcook@ --- src/lib/libssl/s3_srvr.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/lib/libssl/s3_srvr.c') diff --git a/src/lib/libssl/s3_srvr.c b/src/lib/libssl/s3_srvr.c index 10b6312834..9fe96de53e 100644 --- a/src/lib/libssl/s3_srvr.c +++ b/src/lib/libssl/s3_srvr.c @@ -1,4 +1,4 @@ -/* $OpenBSD: s3_srvr.c,v 1.125 2016/03/11 07:08:45 mmcc Exp $ */ +/* $OpenBSD: s3_srvr.c,v 1.126 2016/05/30 13:42:54 beck Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -2558,7 +2558,7 @@ ssl3_send_newsession_ticket(SSL *s) /* Encrypt session data */ EVP_EncryptUpdate(&ctx, p, &len, senc, slen); p += len; - EVP_EncryptFinal(&ctx, p, &len); + EVP_EncryptFinal_ex(&ctx, p, &len); p += len; EVP_CIPHER_CTX_cleanup(&ctx); -- cgit v1.2.3-55-g6feb