Add checking server SSL ctx private key. (#1646)

sogou · Nov 5, 2024 · 48c71d7 · 48c71d7
1 parent 57ffb06
commit 48c71d7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/server/WFServer.cc b/src/server/WFServer.cc
@@ -75,6 +75,7 @@ SSL_CTX *WFServerBase::new_ssl_ctx(const char *cert_file, const char *key_file)
 
 	if (SSL_CTX_use_certificate_chain_file(ssl_ctx, cert_file) > 0 &&
 		SSL_CTX_use_PrivateKey_file(ssl_ctx, key_file, SSL_FILETYPE_PEM) > 0 &&
+		SSL_CTX_check_private_key(ssl_ctx) > 0 &&
 		SSL_CTX_set_tlsext_servername_callback(ssl_ctx, ssl_ctx_callback) > 0 &&
 		SSL_CTX_set_tlsext_servername_arg(ssl_ctx, this) > 0)
 	{