summaryrefslogtreecommitdiffstats
path: root/crypto/conf
diff options
context:
space:
mode:
authorBenjamin Kaduk <bkaduk@akamai.com>2018-04-16 07:32:02 -0500
committerBenjamin Kaduk <kaduk@mit.edu>2018-05-01 11:19:20 -0500
commitc4fa1f7fc016919a5b3d4ea2aa66c77e0cc40c9d (patch)
tree1d1973ae2a4bb290cb72f9678a80e6195885aa3c /crypto/conf
parent0e5c1a66f7911352a4db3bda2293b91858b9f33c (diff)
Fix regression with session cache use by clients
Commit d316cdcf6d8d6934663278145fe0a8191e14a8c5 introduced some extra checks into the session-cache update procedure, intended to prevent the caching of sessions whose resumption would lead to a handshake failure, since if the server is authenticating the client, there needs to be an application-set "session id context" to match up to the authentication context. While that change is effective for its stated purpose, there was also some collatoral damage introduced along with the fix -- clients that set SSL_VERIFY_PEER are not expected to set an sid_ctx, and so their usage of session caching was erroneously denied. Fix the scope of the original commit by limiting it to only acting when the SSL is a server SSL. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5967)
Diffstat (limited to 'crypto/conf')
0 files changed, 0 insertions, 0 deletions