X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;f=ssl%2Fstatem%2Fstatem_clnt.c;h=4c4e6cb209c7ac4283c307998f203c335ff38051;hb=fe56d5951f0b42fd3ff1cf42a96d07f06f9692bc;hp=534902f9b9ab0c16e63eb04048a7e8d1c58b5020;hpb=abd86cecce06a2f56f2d0ccc4743273e5981d547;p=thirdparty%2Fopenssl.git diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c index 534902f9b9..4c4e6cb209 100644 --- a/ssl/statem/statem_clnt.c +++ b/ssl/statem/statem_clnt.c @@ -2152,9 +2152,10 @@ static int tls_process_ske_dhe(SSL *s, PACKET *pkt, EVP_PKEY **pkey) ERR_R_EVP_LIB); goto err; } + dh = NULL; if (!ssl_security(s, SSL_SECOP_TMP_DH, EVP_PKEY_security_bits(peer_tmp), - 0, dh)) { + 0, EVP_PKEY_get0_DH(peer_tmp))) { SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE, SSL_F_TLS_PROCESS_SKE_DHE, SSL_R_DH_KEY_TOO_SMALL); goto err;