Securely erase content of secret keys.

diff --git a/src/libutil/http.c b/src/libutil/http.c
index 6ddeb2518a591da432b0d87b31ac3588d656f734..b94e9bb5202d7074493fee20eb0b5debec68eca2 100644 (file)
--- a/src/libutil/http.c
+++ b/src/libutil/http.c
@@ -1710,6 +1710,8 @@ rspamd_http_router_free (struct rspamd_http_connection_router *router)
 static void
 rspamd_http_keypair_dtor (struct rspamd_http_keypair *kp)
 {
+       rspamd_explicit_memzero (kp->sk, sizeof (kp->sk));
+       rspamd_explicit_memzero (kp->nm, sizeof (kp->nm));
        g_slice_free1 (sizeof (*kp), kp);
 }