lib-dcrypt: Use BN_secure_new in dcrypt_openssl_key_load_private_raw

diff --git a/src/lib-dcrypt/dcrypt-openssl3.c b/src/lib-dcrypt/dcrypt-openssl3.c
index 461de7b8851fe3d46a523c0b1de9e223ea8fb142..51e7f8e06711ed7a55f51e9f517d7d3af5218b8d 100644 (file)
--- a/src/lib-dcrypt/dcrypt-openssl3.c
+++ b/src/lib-dcrypt/dcrypt-openssl3.c
@@ -3338,7 +3338,7 @@ dcrypt_openssl_key_load_private_raw(struct dcrypt_private_key **key_r,
                ASN1_OBJECT_free(obj);
 
                item = array_idx(keys, 1);
-               BIGNUM *point = BN_new();
+               BIGNUM *point = BN_secure_new();
                if (BN_bin2bn(item->parameter, item->len, point) == NULL) {
                        BN_free(point);
                        return dcrypt_openssl_error(error_r);