From: Mark Andrews <marka@isc.org>
Date: Wed, 19 Jul 2023 07:25:17 +0000 (+1000)
Subject: Clear OpenSSL errors on EVP_PKEY_get_bn_param failures
X-Git-Tag: v9.19.17~17^2~19
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d8a9adc821e40d9a959b7ab557d3235849c6a3f0;p=thirdparty%2Fbind9.git

Clear OpenSSL errors on EVP_PKEY_get_bn_param failures
---

diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index 384ee2a9631..73063682ebd 100644
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -97,7 +97,10 @@ opensslrsa_components_get(const dst_key_t *key, rsa_components_t *c,
 		(void)EVP_PKEY_get_bn_param(priv,
 					    OSSL_PKEY_PARAM_RSA_COEFFICIENT1,
 					    (BIGNUM **)&c->iqmp);
+		ERR_clear_error();
 		return (ISC_R_SUCCESS);
+	} else {
+		ERR_clear_error();
 	}
 #endif
 #if OPENSSL_VERSION_NUMBER < 0x30000000L || OPENSSL_API_LEVEL < 30000