CVSROOT: /cvs Module name: src Changes by: js...@cvs.openbsd.org 2017/06/22 12:03:57
Modified files:
lib/libtls : tls.c tls_internal.h tls_server.c tls_util.c
Log message:
Use the tls_password_cb() callback with all PEM_read_bio_*() calls, so that
we can prevent libcrypto from going behind our back and trying to read
passwords from standard input (which we may not be permitted to do).
Found by jsg@ with httpd and password protected keys.
