diff options
| author | Joel Sing <jsing@cvs.openbsd.org> | 2018-11-09 17:43:32 +0000 |
|---|---|---|
| committer | Joel Sing <jsing@cvs.openbsd.org> | 2018-11-09 17:43:32 +0000 |
| commit | 45ad867bd8b9e69e548c70879723f8dd7871549c (patch) | |
| tree | ce64c1c041206820fc20f5faa0064aafc14b91ca /lib | |
| parent | 7a46e36995d575d634e90aa540d819b62a7b3a6a (diff) | |
Ensure we free the handshake transcript upon session resumption.
Found the hard way by jmc@
ok tb@
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libssl/ssl_clnt.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/libssl/ssl_clnt.c b/lib/libssl/ssl_clnt.c index 5dbda1f2fa7..e9e098aa28c 100644 --- a/lib/libssl/ssl_clnt.c +++ b/lib/libssl/ssl_clnt.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_clnt.c,v 1.39 2018/11/09 05:43:39 beck Exp $ */ +/* $OpenBSD: ssl_clnt.c,v 1.40 2018/11/09 17:43:31 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -309,6 +309,9 @@ ssl3_connect(SSL *s) /* receive renewed session ticket */ S3I(s)->hs.state = SSL3_ST_CR_SESSION_TICKET_A; } + + /* No client certificate verification. */ + tls1_transcript_free(s); } } else if (SSL_IS_DTLS(s)) { S3I(s)->hs.state = DTLS1_ST_CR_HELLO_VERIFY_REQUEST_A; |