diff options
| author | Theo Buehler <tb@cvs.openbsd.org> | 2022-01-24 13:51:49 +0000 |
|---|---|---|
| committer | Theo Buehler <tb@cvs.openbsd.org> | 2022-01-24 13:51:49 +0000 |
| commit | 0853376869b39187468fcee7a40cdee025f641d5 (patch) | |
| tree | a468f3f320b70b45f64d8e5e0652850f862461bf /lib/libssl | |
| parent | ff5be747155d5169269906be49ced628d25a6a3c (diff) | |
In ssl3_get_server_key_exchange() switch a 'goto err' to
'goto fatal_err' so that the illegal_parameter alert is
actually sent in case of X509_get0_pubkey() failure.
ok inoguchi jsing
Diffstat (limited to 'lib/libssl')
| -rw-r--r-- | lib/libssl/ssl_clnt.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/libssl/ssl_clnt.c b/lib/libssl/ssl_clnt.c index 61c1d71c8ee..7e4ef44b9ca 100644 --- a/lib/libssl/ssl_clnt.c +++ b/lib/libssl/ssl_clnt.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_clnt.c,v 1.137 2022/01/11 19:03:15 jsing Exp $ */ +/* $OpenBSD: ssl_clnt.c,v 1.138 2022/01/24 13:51:48 tb Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -1378,7 +1378,7 @@ ssl3_get_server_key_exchange(SSL *s) if (pkey == NULL) { al = SSL_AD_ILLEGAL_PARAMETER; SSLerror(s, SSL_R_UNKNOWN_CERTIFICATE_TYPE); - goto err; + goto fatal_err; } if (SSL_USE_SIGALGS(s)) { |