aboutsummaryrefslogtreecommitdiffstats
path: root/src/sbearssl/sbearssl_client_init_and_run.c
diff options
context:
space:
mode:
authorLaurent Bercot <ska-skaware@skarnet.org>2020-11-21 02:22:09 +0000
committerLaurent Bercot <ska-skaware@skarnet.org>2020-11-21 02:22:09 +0000
commit5c2880becc94141b8035b3488b6bd60696011308 (patch)
tree51e177122b50e248075dae441e4a76d68fd33081 /src/sbearssl/sbearssl_client_init_and_run.c
parent5715c21a077ee1c2fe8957cb4adcea14fd2eda6b (diff)
downloads6-networking-5c2880becc94141b8035b3488b6bd60696011308.tar.gz
Privs can only be dropped after reading key files.
Diffstat (limited to 'src/sbearssl/sbearssl_client_init_and_run.c')
-rw-r--r--src/sbearssl/sbearssl_client_init_and_run.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/sbearssl/sbearssl_client_init_and_run.c b/src/sbearssl/sbearssl_client_init_and_run.c
index a95e9e1..a6e7aca 100644
--- a/src/sbearssl/sbearssl_client_init_and_run.c
+++ b/src/sbearssl/sbearssl_client_init_and_run.c
@@ -44,6 +44,8 @@ void sbearssl_client_init_and_run (int *fds, tain_t const *tto, uint32_t preopti
strerr_dief2x(96, "no trust anchor found in ", x) ;
}
+ sbearssl_drop() ;
+
{
sbearssl_handshake_cb_context_t cbarg = { .notif = notif } ;
unsigned char buf[BR_SSL_BUFSIZE_BIDI] ;