MINOR: ssl: checks the consistency of a private key with the corresponding certificate
diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 0838929..330f47a 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -391,6 +391,13 @@
SSL_CTX_free(ctx);
return 1;
}
+
+ if (SSL_CTX_check_private_key(ctx) <= 0) {
+ memprintf(err, "%sinconsistencies between private key and certificate loaded from PEM file '%s'.\n",
+ err && *err ? *err : "", path);
+ return 1;
+ }
+
/* we must not free the SSL_CTX anymore below, since it's already in
* the tree, so it will be discovered and cleaned in time.
*/