27 | | Changing lines 954-962 to: |
28 | | {{{ |
29 | | p = BN_bin2bn(dh1024_p, sizeof(dh1024_p), NULL); |
30 | | g = BN_bin2bn(dh1024_g, sizeof(dh1024_g), NULL); |
31 | | |
32 | | if ((p == NULL) || (g == NULL) || !DH_set0_pqg(dh, p, NULL, g)) { |
33 | | ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0, "BN_bin2bn() failed"); |
34 | | DH_free(dh); |
35 | | BN_free(p); |
36 | | BN_free(g); |
37 | | return NGX_ERROR; |
38 | | } |
39 | | }}} |
40 | | |
41 | | And adding |
42 | | {{{ |
43 | | BN_free(p); |
44 | | BN_free(q); |
45 | | }}} |
46 | | underneath DH_free(dh). I have no idea how good or bad my modifications were, but it compiles successfully and seems to work. |
| 23 | I made it so that it still compiles with versions prior to openssl-1.1.0-pre5, and compiled successfully with openssl-1.0.2g and openssl-1.1.0-pre5. Use at your own risk, I'm just a tinkerer! |