* Hand out the same DH structure in ssl_callback_TmpDH set by
SSL_CTX_set_tmp_dh_callback though once generated as we leak memory otherwise and freeing the structure up after use would be hard to track and in fact is not needed at all as it is safe to use the same parameters over and over again security wise (in contrast to the keys itself) and code safe as the returned structure is duplicated by OpenSSL anyway. Hence no modification happens to our copy. Observed by: rjung Reviewed by: kbrand git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1597349 13f79535-47bb-0310-9956-ffa450edef68
parent
5d1c5b37
Please register or sign in to comment