Hi,
My sloppy cut-n-paste missed this one:
in ssl_verify.c
@@ -1262,7 +1262,7 @@ verify_user_pass(struct user_pass *up, struct
tls_multi *multi,
"No auth-token will be activated now");
if (multi->auth_token)
{
- memset (multi->auth_token, 0, AUTH_TOKEN_SIZE);
+ memset (multi->auth_token, 0, AUTH_TOKEN_SIZE); <-- SecureZero
free (multi->auth_token);
multi->auth_token = NULL;
}
Selva
------------------------------------------------------------------------------
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
