diff options
| author | Lutz Jänicke <jaenicke@openssl.org> | 2000-11-29 16:04:38 +0000 |
|---|---|---|
| committer | Lutz Jänicke <jaenicke@openssl.org> | 2000-11-29 16:04:38 +0000 |
| commit | 0dd2254d7667979ea998af1f480a7841ea864ad5 (patch) | |
| tree | b07297012e16ee82c54a74d01029abff3c0f390a /ssl/ssl_sess.c | |
| parent | 03a0848922d3a4b1a6f216df1c2470a6b946cd87 (diff) | |
| download | openssl-0dd2254d7667979ea998af1f480a7841ea864ad5.tar.gz | |
Store verify_result with sessions to avoid potential security hole.
For the server side this was already done one year ago :-(
Diffstat (limited to 'ssl/ssl_sess.c')
| -rw-r--r-- | ssl/ssl_sess.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ssl/ssl_sess.c b/ssl/ssl_sess.c index 416def8908..7064262def 100644 --- a/ssl/ssl_sess.c +++ b/ssl/ssl_sess.c @@ -508,6 +508,7 @@ int SSL_set_session(SSL *s, SSL_SESSION *session) if (s->session != NULL) SSL_SESSION_free(s->session); s->session=session; + s->verify_result = s->session->verify_result; /* CRYPTO_w_unlock(CRYPTO_LOCK_SSL);*/ ret=1; } |