From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Mon, 31 Oct 2022 09:08:49 +0000 (+0200)
Subject: lib-ssl-iostream: Do not attempt to load empty DH parameters
X-Git-Tag: 2.4.0~3457
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e8f5a73714a66d682cd77b32e9d2b0de7155748e;p=thirdparty%2Fdovecot%2Fcore.git

lib-ssl-iostream: Do not attempt to load empty DH parameters

OpenSSL3 complains about empty DH parameters.
---

diff --git a/src/lib-ssl-iostream/iostream-openssl-context.c b/src/lib-ssl-iostream/iostream-openssl-context.c
index c0bd5bfb27..f0a5ad6625 100644
--- a/src/lib-ssl-iostream/iostream-openssl-context.c
+++ b/src/lib-ssl-iostream/iostream-openssl-context.c
@@ -463,7 +463,7 @@ ssl_iostream_context_set(struct ssl_iostream_context *ctx,
 			return -1;
 	}
 
-	if (set->dh != NULL) {
+	if (set->dh != NULL && *set->dh != '\0') {
 		if (ssl_iostream_ctx_use_dh(ctx, set, error_r) < 0)
 			return -1;
 	}