tls-crypto: Destroy HKDF instance if keys are derived multiple times

This will be the case during a retry.

diff --git a/src/libtls/tls_crypto.c b/src/libtls/tls_crypto.c
index 494a6930a708ad68f011cebddc726b8145914647..04fe4ef0f40046fd8f938dab3d9bd4750927bcf0 100644 (file)
--- a/src/libtls/tls_crypto.c
+++ b/src/libtls/tls_crypto.c
@@ -1270,6 +1270,7 @@ static void destroy_aeads(private_tls_crypto_t *this)
 static bool create_ciphers(private_tls_crypto_t *this, suite_algs_t *algs)
 {
        destroy_aeads(this);
+       DESTROY_IF(this->hkdf);
        DESTROY_IF(this->prf);
        if (this->tls->get_version_max(this->tls) < TLS_1_3)
        {