Clear OpenSSL errors on SHA failures

diff --git a/lib/isc/iterated_hash.c b/lib/isc/iterated_hash.c
index e402e42221e12d62662d20ec9ad0f3a07c08678e..119c300050a1da6b03d06c87007713e1030d9a85 100644 (file)
--- a/lib/isc/iterated_hash.c
+++ b/lib/isc/iterated_hash.c
@@ -14,6 +14,7 @@
 #include <stdbool.h>
 #include <stdio.h>
 
+#include <openssl/err.h>
 #include <openssl/opensslv.h>
 
 #include <isc/iterated_hash.h>
@@ -45,18 +46,22 @@ isc_iterated_hash(unsigned char *out, const unsigned int hashalg,
 
        do {
                if (SHA1_Init(&ctx) != 1) {
+                       ERR_clear_error();
                        return (0);
                }
 
                if (SHA1_Update(&ctx, buf, len) != 1) {
+                       ERR_clear_error();
                        return (0);
                }
 
                if (SHA1_Update(&ctx, salt, saltlength) != 1) {
+                       ERR_clear_error();
                        return (0);
                }
 
                if (SHA1_Final(out, &ctx) != 1) {
+                       ERR_clear_error();
                        return (0);
                }