tor

commit c000763f1eadb01bdb1fc159e698ebcff58b3b8b
parent ff27b7ce60b20ad831b3f0a92b49236103d47410
Author: Nick Mathewson <nickm@torproject.org>
Date:   Thu, 24 May 2018 09:40:00 -0400

Merge branch 'bug26116_033' into maint-0.3.3

Diffstat:
A
changes/bug26116
 | 
7
+++++++
M
src/common/crypto_rsa.c
 | 
2
+-

2 files changed, 8 insertions(+), 1 deletion(-)
diff --git a/changes/bug26116 b/changes/bug26116
@@ -0,0 +1,7 @@
+  o Minor bugfixes (compatibility, openssl):
+    - Work around a change in OpenSSL 1.1.1 where
+      return values that would previously indicate "no password" now
+      indicate an empty password. Without this workaround, Tor instances
+      running with OpenSSL 1.1.1 would accept descriptors that other Tor
+      instances would reject. Fixes bug 26116; bugfix on 0.2.5.16.
+      
diff --git a/src/common/crypto_rsa.c b/src/common/crypto_rsa.c
@@ -237,7 +237,7 @@ pem_no_password_cb(char *buf, int size, int rwflag, void *u)
   (void)size;
   (void)rwflag;
   (void)u;
-  return 0;
+  return -1;
 }
 
 /** Read a PEM-encoded private key from the <b>len</b>-byte string <b>s</b>