CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2018/04/18 10:29:11
Modified files:
lib/libtls : Tag: OPENBSD_6_3 tls_config.c tls_internal.h
tls_keypair.c
Log message:
Limit tls_config_clear_keys() to only clearing private keys.
This was inadvertently clearing the keypair, which includes the OCSP staple
and pubkey hash - if an application called tls_configure() followed by
tls_config_clear_keys(), this would prevent OCSP staples from working.
ok beck@
