]> git.ipfire.org Git - thirdparty/krb5.git/commit
Check more errors in OpenSSL crypto backend 919/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 22 Apr 2019 18:26:42 +0000 (14:26 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 23 Apr 2019 20:36:32 +0000 (16:36 -0400)
commit2298e5c2ff1122bcaff715129f5b746e77c3f42a
tree476d7f5734d0dd066944133a99ed55d0f4cd2974
parent64e82a1da0e252df02894df22735236b9aa62f26
Check more errors in OpenSSL crypto backend

In krb5int_hmac_keyblock() and krb5int_pbkdf2_hmac(), check for errors
from previously unchecked OpenSSL function calls and return
KRB5_CRYPTO_INTERNAL if they fail.

HMAC_Init() is deprecated in OpenSSL 1.0 and later; as we are
modifying the call to check for errors, call HMAC_Init_ex() instead.

ticket: 8799 (new)
src/lib/crypto/openssl/hmac.c
src/lib/crypto/openssl/pbkdf2.c