commit bd058b9d2400fec147ed9717101af114eaf364ec
author Piotr Sikora <piotr@cloudflare.com> Sun Jul 06 16:41:13 2014 -0700
committer Piotr Sikora <piotr@cloudflare.com> Sun Jul 06 16:41:13 2014 -0700
tree 82c087ab98f25a374df71558054cedc62688c19a
parent f0e05f3d89315c0513ab01573e822bee0e31dcc4

SSL: return temporary RSA key only when the key length matches.

This change is mostly cosmetic, because in practice this callback
is used only for 512-bit RSA keys.

Signed-off-by: Piotr Sikora <piotr@cloudflare.com>

src/event/ngx_event_openssl.c

diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
index 50691ad..46934b2 100644
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -652,10 +652,12 @@
 {
     static RSA  *key;
 
-    if (key_length == 512) {
-        if (key == NULL) {
-            key = RSA_generate_key(512, RSA_F4, NULL, NULL);
-        }
+    if (key_length != 512) {
+        return NULL;
+    }
+
+    if (key == NULL) {
+        key = RSA_generate_key(512, RSA_F4, NULL, NULL);
     }
 
     return key;