forwarded 829108 https://rt.openssl.org/Ticket/Display.html?id=4603&user=guest&pass=guest thanks
On Thu, Jun 30, 2016 at 05:35:25PM +0200, Marc Lehmann wrote: > > the HMAC manpage states: > > HMAC_Init_ex() initializes or reuses a HMAC_CTX structure to use the > function evp_md and key key. Either can be NULL, in which case the > existing one will be reused. > > However, the current code does not allow the key to be zero when evp_md is > non-zero in all cases: > > /* If we are changing MD then we must have a key */ > if (md != NULL && md != ctx->md && (key == NULL || len < 0)) > return 0; Forwarded upstream. Kurt

