summaryrefslogtreecommitdiffstats
path: root/lib/libssl/ssl_cert.c
diff options
context:
space:
mode:
authorjsing <jsing@openbsd.org>2014-12-06 14:24:26 +0000
committerjsing <jsing@openbsd.org>2014-12-06 14:24:26 +0000
commit070202f1b2f50fb037ff2c82d77f57f64e7aac1e (patch)
tree9b6447954ef867baf997e61bb4b16d3893618712 /lib/libssl/ssl_cert.c
parentUse appropriate internal types for EC curves and formats, rather than (diff)
downloadwireguard-openbsd-070202f1b2f50fb037ff2c82d77f57f64e7aac1e.tar.xz
wireguard-openbsd-070202f1b2f50fb037ff2c82d77f57f64e7aac1e.zip
Remove client handling of RSA in ServerKeyExchange messages, along with
the associated peer_rsa_tmp goop. This was only needed for export cipher handling and intentional RFC violations. The export cipher suites have already been removed and previous cleanup means that we will never send ServerKeyExchange messages from the server side for RSA.
Diffstat (limited to 'lib/libssl/ssl_cert.c')
-rw-r--r--lib/libssl/ssl_cert.c3
1 files changed, 1 insertions, 2 deletions
diff --git a/lib/libssl/ssl_cert.c b/lib/libssl/ssl_cert.c
index 8bbfcd85d15..8f830d990ab 100644
--- a/lib/libssl/ssl_cert.c
+++ b/lib/libssl/ssl_cert.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_cert.c,v 1.46 2014/11/18 05:33:43 miod Exp $ */
+/* $OpenBSD: ssl_cert.c,v 1.47 2014/12/06 14:24:26 jsing Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -406,7 +406,6 @@ ssl_sess_cert_free(SESS_CERT *sc)
X509_free(sc->peer_pkeys[i].x509);
}
- RSA_free(sc->peer_rsa_tmp);
DH_free(sc->peer_dh_tmp);
EC_KEY_free(sc->peer_ecdh_tmp);