From 5c2880becc94141b8035b3488b6bd60696011308 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Sat, 21 Nov 2020 02:22:09 +0000 Subject: Privs can only be dropped after reading key files. --- src/stls/stls_server_init_and_handshake.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/stls/stls_server_init_and_handshake.c') diff --git a/src/stls/stls_server_init_and_handshake.c b/src/stls/stls_server_init_and_handshake.c index 58d812e..5d9c25c 100644 --- a/src/stls/stls_server_init_and_handshake.c +++ b/src/stls/stls_server_init_and_handshake.c @@ -33,6 +33,8 @@ struct tls *stls_server_init_and_handshake (int const *fds, uint32_t preoptions) if (tls_config_set_key_file(cfg, x) < 0) diecfg(cfg, "tls_config_set_key_file") ; + stls_drop() ; + if (tls_config_set_ciphers(cfg, "secure") < 0) diecfg(cfg, "tls_config_set_ciphers") ; -- cgit v1.3.1