From: Radu Nicolau <radu.nicolau@intel.com>
Date: Tue, 29 May 2018 10:42:33 +0000 (+0100)
Subject: ipsec: fix IKEv2 crash when rsa cert is used for authentication
X-Git-Tag: v18.07-rc1~265
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F84%2F12784%2F2;p=vpp.git

ipsec: fix IKEv2 crash when rsa cert is used for authentication

Cause: EVP_MD_CTX object used but not initialized.

Change-Id: I390b2acf580f16415685563fa52e56717efc7be7
Signed-off-by: Radu Nicolau <radu.nicolau@intel.com>
---

diff --git a/src/vnet/ipsec/ikev2_crypto.c b/src/vnet/ipsec/ikev2_crypto.c
index 32e687e37c0..5a35dfc5503 100644
--- a/src/vnet/ipsec/ikev2_crypto.c
+++ b/src/vnet/ipsec/ikev2_crypto.c
@@ -673,6 +673,7 @@ ikev2_verify_sign (EVP_PKEY * pkey, u8 * sigbuf, u8 * data)
   EVP_MD_CTX *md_ctx = EVP_MD_CTX_new ();
 #else
   EVP_MD_CTX md_ctx;
+  EVP_MD_CTX_init (&md_ctx);
 #endif
 
 #if OPENSSL_VERSION_NUMBER >= 0x10100000L