From 02f90b195df4176018c0c6abb6b8e93c60873827 Mon Sep 17 00:00:00 2001 From: tb Date: Mon, 24 Jan 2022 13:51:48 +0000 Subject: [PATCH] In ssl3_get_server_key_exchange() switch a 'goto err' to 'goto fatal_err' so that the illegal_parameter alert is actually sent in case of X509_get0_pubkey() failure. ok inoguchi jsing --- lib/libssl/ssl_clnt.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/libssl/ssl_clnt.c b/lib/libssl/ssl_clnt.c index 61c1d71c8ee..7e4ef44b9ca 100644 --- a/lib/libssl/ssl_clnt.c +++ b/lib/libssl/ssl_clnt.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_clnt.c,v 1.137 2022/01/11 19:03:15 jsing Exp $ */ +/* $OpenBSD: ssl_clnt.c,v 1.138 2022/01/24 13:51:48 tb Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -1378,7 +1378,7 @@ ssl3_get_server_key_exchange(SSL *s) if (pkey == NULL) { al = SSL_AD_ILLEGAL_PARAMETER; SSLerror(s, SSL_R_UNKNOWN_CERTIFICATE_TYPE); - goto err; + goto fatal_err; } if (SSL_USE_SIGALGS(s)) { -- 2.20.1