From: Dr. Stephen Henson <steve@openssl.org>
Date: Thu, 27 Oct 2011 13:01:20 +0000 (+0000)
Subject: PR: 2628
X-Git-Tag: OpenSSL_1_0_1-beta1~105
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=6d24c09a6963d6a77fc5695c3800da72de3432e4;p=oweals%2Fopenssl.git

PR: 2628
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix for ECC keys and DTLS.
---

diff --git a/ssl/d1_srvr.c b/ssl/d1_srvr.c
index 1cae330b17..360f873463 100644
--- a/ssl/d1_srvr.c
+++ b/ssl/d1_srvr.c
@@ -1269,7 +1269,7 @@ int dtls1_send_server_key_exchange(SSL *s)
 				EVP_SignInit_ex(&md_ctx,EVP_ecdsa(), NULL);
 				EVP_SignUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE);
 				EVP_SignUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE);
-				EVP_SignUpdate(&md_ctx,&(d[4]),n);
+				EVP_SignUpdate(&md_ctx,&(d[DTLS1_HM_HEADER_LENGTH]),n);
 				if (!EVP_SignFinal(&md_ctx,&(p[2]),
 					(unsigned int *)&i,pkey))
 					{