diff options
| author |   jsing <jsing@openbsd.org> | 2018-11-09 17:43:31 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2018-11-09 17:43:31 +0000 |
| commit | 1cfaeb6483036b8c15f8870f9a3ef4abe149e9a4 (patch) | |
| tree | d4595562cddc362f5fefd5c90149fb882ef6b820 /lib/libssl/ssl_clnt.c | |
| parent | Abstract a separate function to scan the list provided by getifaddrs() (diff) | |
| download | wireguard-openbsd-1cfaeb6483036b8c15f8870f9a3ef4abe149e9a4.tar.xz wireguard-openbsd-1cfaeb6483036b8c15f8870f9a3ef4abe149e9a4.zip | |
Ensure we free the handshake transcript upon session resumption.
Found the hard way by jmc@
ok tb@
Diffstat (limited to 'lib/libssl/ssl_clnt.c')
| -rw-r--r-- | lib/libssl/ssl_clnt.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/libssl/ssl_clnt.c b/lib/libssl/ssl_clnt.c index 5dbda1f2fa7..e9e098aa28c 100644 --- a/lib/libssl/ssl_clnt.c +++ b/lib/libssl/ssl_clnt.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_clnt.c,v 1.39 2018/11/09 05:43:39 beck Exp $ */ +/* $OpenBSD: ssl_clnt.c,v 1.40 2018/11/09 17:43:31 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -309,6 +309,9 @@ ssl3_connect(SSL *s) /* receive renewed session ticket */ S3I(s)->hs.state = SSL3_ST_CR_SESSION_TICKET_A; } + + /* No client certificate verification. */ + tls1_transcript_free(s); } } else if (SSL_IS_DTLS(s)) { S3I(s)->hs.state = DTLS1_ST_CR_HELLO_VERIFY_REQUEST_A; |