Free and zero DH/ECDH temporary key after use.
PR#4303 Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
This commit is contained in:
parent
63994098d5
commit
5b326dc529
1 changed files with 4 additions and 0 deletions
|
@ -2360,6 +2360,8 @@ MSG_PROCESS_RETURN tls_process_client_key_exchange(SSL *s, PACKET *pkt)
|
|||
|
||||
EVP_PKEY_free(ckey);
|
||||
ckey = NULL;
|
||||
EVP_PKEY_free(s->s3->tmp.pkey);
|
||||
s->s3->tmp.pkey = NULL;
|
||||
|
||||
} else
|
||||
#endif
|
||||
|
@ -2412,6 +2414,8 @@ MSG_PROCESS_RETURN tls_process_client_key_exchange(SSL *s, PACKET *pkt)
|
|||
|
||||
EVP_PKEY_free(ckey);
|
||||
ckey = NULL;
|
||||
EVP_PKEY_free(s->s3->tmp.pkey);
|
||||
s->s3->tmp.pkey = NULL;
|
||||
|
||||
return MSG_PROCESS_CONTINUE_PROCESSING;
|
||||
} else
|
||||
|
|
Loading…
Reference in a new issue