diff options
| author |   beck <beck@openbsd.org> | 1999-03-07 23:12:01 +0000 |
|---|---|---|
| committer | beck <beck@openbsd.org> | 1999-03-07 23:12:01 +0000 |
| commit | ac4d7a112ce6cfab83c35511a77da91508b88808 (patch) | |
| tree | d107a6fa81be52466d887127cc410a496826381e /usr.sbin/httpd/src | |
| parent | disable isp, enable adw/mx/vr (diff) | |
| download | wireguard-openbsd-ac4d7a112ce6cfab83c35511a77da91508b88808.tar.xz wireguard-openbsd-ac4d7a112ce6cfab83c35511a77da91508b88808.zip | |
don't fatal out on init if RSA doesn't work, so as not to die if an RSA
libssl isn't installed and we only want to do http
Diffstat (limited to 'usr.sbin/httpd/src')
| -rw-r--r-- | usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c b/usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c index 7df32b19af9..06084f34981 100644 --- a/usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c +++ b/usr.sbin/httpd/src/modules/ssl/ssl_engine_init.c @@ -241,8 +241,17 @@ void ssl_init_Module(server_rec *s, pool *p) ssl_log(s, SSL_LOG_INFO, "Init: Generating temporary (512 bit) RSA private key"); mc->pRSATmpKey = RSA_generate_key(512, RSA_F4, NULL, NULL); if (mc->pRSATmpKey == NULL) { +#ifdef __OpenBSD__ + ssl_log(s, SSL_LOG_ERROR, "Init: Failed to generate temporary (512 bit) RSA private key (SSL won't work without an RSA capable shared library)"); + ssl_log(s, SSL_LOG_ERROR, "Init: pkg_add ftp://ftp.openbsd.org/pub/2.5/packages/<arch>/libssl-1.1.tgz if you are able to use RSA"); + /* harmless in http only case. We'll get a fatal error below + * if this didn't work and we try to init https servers + */ + return; +#else ssl_log(s, SSL_LOG_ERROR, "Init: Failed to generate temporary (512 bit) RSA private key"); ssl_die(); +#endif } } |