]> git.ipfire.org Git - thirdparty/openssl.git/commit - ssl/statem/statem_clnt.c
Digest cached records if not sending a certificate.
authorDr. Stephen Henson <steve@openssl.org>
Wed, 6 May 2015 23:04:48 +0000 (00:04 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 6 May 2015 23:37:10 +0000 (00:37 +0100)
commitdab18ab596acb35eff2545643e25757e4f9cd777
tree3381e1ce7cce177283936f5eae4913c769d322b8
parent45ebd7312874548904f3e438b39704d0134c7a1b
Digest cached records if not sending a certificate.

If server requests a certificate, but the client doesn't send one, cache
digested records. This is an optimisation and ensures the correct finished
mac is used when extended master secret is used with client authentication.

Reviewed-by: Tim Hudson <tjh@openssl.org>
ssl/s3_clnt.c