You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by wr...@apache.org on 2017/02/17 17:40:00 UTC
svn commit: r1783438 - /httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
Author: wrowe
Date: Fri Feb 17 17:39:59 2017
New Revision: 1783438
URL: http://svn.apache.org/viewvc?rev=1783438&view=rev
Log:
Thanks to R�diger, Yann and Jacob for catches and verification
Modified:
httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
Modified: httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_engine_init.c?rev=1783438&r1=1783437&r2=1783438&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_engine_init.c (original)
+++ httpd/httpd/trunk/modules/ssl/ssl_engine_init.c Fri Feb 17 17:39:59 2017
@@ -1322,7 +1322,7 @@ static apr_status_t ssl_init_server_cert
/*
* ...otherwise, enable auto curve selection (OpenSSL 1.0.2)
* or configure NIST P-256 (required to enable ECDHE for earlier versions)
- * ECDH is always enabled in 1.0.2 unless excluded from SSLCipherList
+ * ECDH is always enabled in 1.1.0 unless excluded from SSLCipherList
*/
#if (OPENSSL_VERSION_NUMBER < 0x10100000L)
else {
@@ -1334,6 +1334,7 @@ static apr_status_t ssl_init_server_cert
#endif
}
#endif
+ /* OpenSSL assures us that _free() is NULL-safe */
EC_KEY_free(eckey);
EC_GROUP_free(ecparams);
#endif