summaryrefslogtreecommitdiff
path: root/usr.sbin/ikectl
diff options
context:
space:
mode:
authorDoug Hogan <doug@cvs.openbsd.org>2014-08-25 07:50:27 +0000
committerDoug Hogan <doug@cvs.openbsd.org>2014-08-25 07:50:27 +0000
commit3ce4bc0c280ae5c7531019bcad5a537825322a3c (patch)
treea710ec3b6dfae01df1435cb8cf460b5545d9edd9 /usr.sbin/ikectl
parentf18e11632908ef2c093163862bc584b52fe13a54 (diff)
Delete secret or secret-derived data with explicit_bzero.
concept ok deraadt@ diff looks ok tedu@
Diffstat (limited to 'usr.sbin/ikectl')
-rw-r--r--usr.sbin/ikectl/ikeca.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/ikectl/ikeca.c b/usr.sbin/ikectl/ikeca.c
index c66fbb65cd4..cb19ba94ec3 100644
--- a/usr.sbin/ikectl/ikeca.c
+++ b/usr.sbin/ikectl/ikeca.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ikeca.c,v 1.27 2014/07/20 01:38:40 guenther Exp $ */
+/* $OpenBSD: ikeca.c,v 1.28 2014/08/25 07:50:26 doug Exp $ */
/*
* Copyright (c) 2010 Jonathan Gray <jsg@openbsd.org>
@@ -795,7 +795,7 @@ ca_revoke(struct ca *ca, char *keyname)
pass, ca->sslpath, ca->sslpath);
system(cmd);
- bzero(pass, len);
+ explicit_bzero(pass, len);
free(pass);
return (0);