Fix DH key generation.

Contributed by: Anonymous <nobody@replay.com>
This commit is contained in:
Ben Laurie 1999-01-07 00:37:01 +00:00
parent c13d4799dd
commit 6fa89f94c4
2 changed files with 13 additions and 6 deletions

View File

@ -5,6 +5,10 @@
Changes between 0.9.1c and 0.9.2
*) If a DH key is generated in s3_srvr.c, don't blow it by trying to use
NULL pointers.
[Anonymous <nobody@replay.com>]
*) s_server should send the CAfile as acceptable CAs, not its own cert.
[Bodo Moeller <3moeller@informatik.uni-hamburg.de>]

View File

@ -953,13 +953,16 @@ SSL *s;
}
s->s3->tmp.dh=dh;
if (((dhp->pub_key == NULL) ||
(dhp->priv_key == NULL) ||
(s->options & SSL_OP_SINGLE_DH_USE)) &&
(!DH_generate_key(dh)))
if ((dhp->pub_key == NULL ||
dhp->priv_key == NULL ||
(s->options & SSL_OP_SINGLE_DH_USE)))
{
SSLerr(SSL_F_SSL3_SEND_SERVER_KEY_EXCHANGE,ERR_R_DH_LIB);
goto err;
if(!DH_generate_key(dh))
{
SSLerr(SSL_F_SSL3_SEND_SERVER_KEY_EXCHANGE,
ERR_R_DH_LIB);
goto err;
}
}
else
{