From 4c4776b7a160e146de351c0706927d3224449751 Mon Sep 17 00:00:00 2001
From: "C. McEnroe" <june@causal.agency>
Date: Sat, 21 Aug 2021 16:08:55 -0400
Subject: Zero local-key memory before freeing it

---
 local.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/local.c b/local.c
index ff879c8..a7f4abb 100644
--- a/local.c
+++ b/local.c
@@ -91,6 +91,7 @@ void localConfig(FILE *cert, FILE *priv, FILE *ca, bool require) {
 	if (error) {
 		errx(EX_CONFIG, "tls_config_set_key_mem: %s", tls_config_error(config));
 	}
+	explicit_bzero(buf, len);
 	free(buf);
 
 	if (ca) {
-- 
cgit 1.4.1