| 27 | | Changing lines 954-962 to: |
| 28 | | {{{ |
| 29 | | p = BN_bin2bn(dh1024_p, sizeof(dh1024_p), NULL); |
| 30 | | g = BN_bin2bn(dh1024_g, sizeof(dh1024_g), NULL); |
| 31 | | |
| 32 | | if ((p == NULL) || (g == NULL) || !DH_set0_pqg(dh, p, NULL, g)) { |
| 33 | | ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0, "BN_bin2bn() failed"); |
| 34 | | DH_free(dh); |
| 35 | | BN_free(p); |
| 36 | | BN_free(g); |
| 37 | | return NGX_ERROR; |
| 38 | | } |
| 39 | | }}} |
| 40 | | |
| 41 | | And adding |
| 42 | | {{{ |
| 43 | | BN_free(p); |
| 44 | | BN_free(q); |
| 45 | | }}} |
| 46 | | underneath DH_free(dh). I have no idea how good or bad my modifications were, but it compiles successfully and seems to work. |
| | 23 | I made it so that it still compiles with versions prior to openssl-1.1.0-pre5, and compiled successfully with openssl-1.0.2g and openssl-1.1.0-pre5. Use at your own risk, I'm just a tinkerer! |