tree 43d8e66e1774b659e7f850bbc1c269622b4079ea
parent e63a1eb290a1c407453dbcaa16535c85a1904f9e
author Remi Gacogne <rgacogne[at]aquaray[dot]fr> 1405417000 +0200
committer Willy Tarreau <w@1wt.eu> 1405433225 +0200
encoding latin1

BUG/MEDIUM: ssl: Fix a memory leak in DHE key exchange

OpenSSL does not free the DH * value returned by the callback specified with SSL_CTX_set_tmp_dh_callback(),
leading to a memory leak for SSL/TLS connections using Diffie Hellman Ephemeral key exchange.
This patch fixes the leak by allocating the DH * structs holding the DH parameters once, at configuration time.

Note: this fix must be backported to 1.5.