Clear OpenSSL errors on EVP_PKEY_get_bn_param failures

diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index 384ee2a9631a7b3cb60254e3885eb4a82bb06a41..73063682ebd56ef4e8e5f3def600373036db556d 100644 (file)
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -97,7 +97,10 @@ opensslrsa_components_get(const dst_key_t *key, rsa_components_t *c,
                (void)EVP_PKEY_get_bn_param(priv,
                                            OSSL_PKEY_PARAM_RSA_COEFFICIENT1,
                                            (BIGNUM **)&c->iqmp);
+               ERR_clear_error();
                return (ISC_R_SUCCESS);
+       } else {
+               ERR_clear_error();
        }
 #endif
 #if OPENSSL_VERSION_NUMBER < 0x30000000L || OPENSSL_API_LEVEL < 30000