Hi,

I afraid ssl/s3_srvr.c has a bug, version OpenSSL-0.9.8d and earlier

line #2045:
        tkey = s->cert->key->privatekey->pkey.ec;

Problem is that s->cert->key not always points to EC key, if RSA key
was added after EC key it points to RSA key
I would assume that following line will suit in all cases:

        tkey = s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec;

Regards,

Alex Tyshlek
Senior Software Engineer
ERUCES, Inc.
[EMAIL PROTECTED]
913.310.0888 x4103

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to