Merge pull request #3 from systelab/cleansed-strings

Cleansed certificate strings for dump protection
systelab · Feb 15, 2022 · ec438e7 · ec438e7
2 parents 69db7d0 + a4121b9
commit ec438e7
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/RELEASENOTES.md b/RELEASENOTES.md
@@ -1,5 +1,12 @@
 # Summary of changes
 
+## Changes for version 2.0.2 (15 Feb 2022)
+
+### Bug Fixes
+
+- Cleansed certificate strings for dump protection
+
+
 ## Changes for version 2.0.1 (8 Feb 2022)
 
 ### Bug Fixes

diff --git a/src/HttpLibWebServerAdapter/SecuredServer.cpp b/src/HttpLibWebServerAdapter/SecuredServer.cpp
@@ -33,6 +33,10 @@ namespace systelab { namespace web_server { namespace httplib {
 		{
 			httpLibServer.reset(new ::httplib::SSLServer(serverCertificate, serverPrivateKey, serverDHParam, "", tlsSupportMask));
 		}
+
+		std::memset(&serverCertificate[0], '0', strlen(&serverCertificate[0]));
+		std::memset(&serverPrivateKey[0], '0', strlen(&serverPrivateKey[0]));
+		std::memset(&serverDHParam[0], '0', strlen(&serverDHParam[0]));
 
 		configureRoutes(*httpLibServer);
 		httpLibServer->set_gzip_compression_enabled(m_configuration->isGZIPCompressionEnabled());