[exim-cvs] Check returncode from SSL_CTX_set_cipher_list()

Gitweb: https://git.exim.org/exim.git/commitdiff/ca954d7feca8d9a8cc754ef2a2bfba14ef5428da

Commit:     ca954d7feca8d9a8cc754ef2a2bfba14ef5428da
Parent:     987f4b40af5ce7a7ff3ff60f490ff81421c4e07a
Author:     Jeremy Harris <jgh146exb@???>
AuthorDate: Thu Sep 13 17:17:22 2018 +0100
Committer:  Jeremy Harris <jgh146exb@???>
CommitDate: Thu Sep 13 17:18:50 2018 +0100

    Check returncode from SSL_CTX_set_cipher_list()
---
 src/src/tls-openssl.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/src/tls-openssl.c b/src/src/tls-openssl.c
index 53a967a..0cf6627 100644
--- a/src/src/tls-openssl.c
+++ b/src/src/tls-openssl.c
@@ -1248,8 +1248,10 @@ if (  !init_dh(server_sni, cbinfo->dhparam, NULL, &dummy_errstr)
    )
   return SSL_TLSEXT_ERR_NOACK;

-if (cbinfo->server_cipher_list)
- SSL_CTX_set_cipher_list(server_sni, CS cbinfo->server_cipher_list);
+if ( cbinfo->server_cipher_list
+ && !SSL_CTX_set_cipher_list(server_sni, CS cbinfo->server_cipher_list))
+ return SSL_TLSEXT_ERR_NOACK;
+
#ifndef DISABLE_OCSP
if (cbinfo->u_ocsp.server.file)
{