comparison src/event/ngx_event_openssl.c @ 7994:aeab41dfd260

SSL: free pkey on SSL_CTX_set0_tmp_dh_pkey() failure. The behaviour was changed in OpenSSL 3.0.1: https://git.openssl.org/?p=openssl.git;a=commitdiff;h=bf17b7b
author Sergey Kandaurov <pluknet@nginx.com>
date Mon, 17 Jan 2022 17:05:12 +0300
parents b002ad258f1d
children e30f7dc7f143
comparison
equal deleted inserted replaced
7993:96ae8e57b3dd 7994:aeab41dfd260
1381 } 1381 }
1382 1382
1383 if (SSL_CTX_set0_tmp_dh_pkey(ssl->ctx, dh) != 1) { 1383 if (SSL_CTX_set0_tmp_dh_pkey(ssl->ctx, dh) != 1) {
1384 ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0, 1384 ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
1385 "SSL_CTX_set0_tmp_dh_pkey(\%s\") failed", file->data); 1385 "SSL_CTX_set0_tmp_dh_pkey(\%s\") failed", file->data);
1386 #if (OPENSSL_VERSION_NUMBER >= 0x3000001fL)
1387 EVP_PKEY_free(dh);
1388 #endif
1386 BIO_free(bio); 1389 BIO_free(bio);
1387 return NGX_ERROR; 1390 return NGX_ERROR;
1388 } 1391 }
1389 } 1392 }
1390 #endif 1393 #endif