BUG/MEDIUM: ssl: loading dh param from certifile causes unpredictable error.

If the dh parameter is not found, the openssl's error global
stack was not correctly cleared causing unpredictable error
during the following parsing (chain cert parsing for instance).

This patch should be backported in 1.8 (and perhaps 1.7)

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index a0bea59..813b599 100644 (file)
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -2607,6 +2607,8 @@ end:
         if (in)
                 BIO_free(in);
 
+       ERR_clear_error();
+
        return dh;
 }