diff options
| author | nahi <nahi@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2011-06-22 13:39:56 +0000 |
|---|---|---|
| committer | nahi <nahi@b2dd03c8-39d4-4d8f-98ff-823fe69b080e> | 2011-06-22 13:39:56 +0000 |
| commit | dea3113ab324ee47fba127ba7745f5213d931536 (patch) | |
| tree | e45ae56b73c2f9d588024c4f8f704912bace0620 /ChangeLog | |
| parent | 8d836a15e46baacfb136b883e9efa5e08cc4727b (diff) | |
| download | ruby-dea3113ab324ee47fba127ba7745f5213d931536.tar.gz | |
* ext/openssl/ossl_ssl.c (ossl_sslctx_session_new_cb): Return 0 to
OpenSSL from the callback for SSL_CTX_sess_set_get_cb().
Returning 0 means to OpenSSL that the the session is still valid
(since we created Ruby Session object) and was not freed by us with
SSL_SESSION_free(). Call SSLContext#remove_session(sess) in
session_get_cb block if you don't want OpenSSL to cache the session
internally.
This potential issue was pointed by Ippei Obayashi. See #4416.
* test/openssl/test_ssl_session.rb (test_ctx_server_session_cb): Test
it.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@32204 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 14 |
1 files changed, 14 insertions, 0 deletions
@@ -1,3 +1,17 @@ +Wed Jun 22 22:34:05 2011 Hiroshi Nakamura <nahi@ruby-lang.org> + + * ext/openssl/ossl_ssl.c (ossl_sslctx_session_new_cb): Return 0 to + OpenSSL from the callback for SSL_CTX_sess_set_get_cb(). + Returning 0 means to OpenSSL that the the session is still valid + (since we created Ruby Session object) and was not freed by us with + SSL_SESSION_free(). Call SSLContext#remove_session(sess) in + session_get_cb block if you don't want OpenSSL to cache the session + internally. + This potential issue was pointed by Ippei Obayashi. See #4416. + + * test/openssl/test_ssl_session.rb (test_ctx_server_session_cb): Test + it. + Wed Jun 22 22:21:17 2011 Martin Bosslet <Martin.Bosslet@googlemail.com> * ext/openssl/ossl_ssl_session.c: Respect T_BIGNUM time values. Patch by |