CVSROOT: /cvs Module name: src Changes by: clau...@cvs.openbsd.org 2017/08/09 15:31:16
Modified files:
usr.sbin/relayd: ca.c
Log message:
Use X509_pubkey_digest() like libtls to hash the keys for the TLS privsep
code. This fixes interception mode (since there we rewrite the CERT which
would alter the hash of the cert but the keys still remain the same).
OK bluhm@ and jsing@
