the news

static OSStatus
SSLVerifySignedServerKeyExchange(SSLContext *ctx, bool isRsa, SSLBuffer signedParams,
                                 uint8_t *signature, UInt16 signatureLen)
{
	OSStatus        err;
	...
	if ((err = SSLHashSHA1.update(&hashCtx, &serverRandom)) != 0)
	    goto fail;
	if ((err = SSLHashSHA1.update(&hashCtx, &signedParams)) != 0)
	    goto fail;
	    goto fail;
	if ((err = SSLHashSHA1.final(&hashCtx, &hashOut)) != 0)
	    goto fail;
	...
fail:
	SSLFreeBuffer(&signedHashes);
	SSLFreeBuffer(&hashCtx);
	return err;
}