]> git.ipfire.org Git - thirdparty/hostap.git/commit
BoringSSL: Fix session resumption
authorJouni Malinen <jouni@qca.qualcomm.com>
Mon, 17 Aug 2015 19:50:41 +0000 (22:50 +0300)
committerJouni Malinen <j@w1.fi>
Mon, 17 Aug 2015 22:56:05 +0000 (01:56 +0300)
commita7803b0cafb5e8f920b5d634d3c70496b3d47088
treef2566a2b4f7e90efbd72bb73ad5bb31cc4ab480c
parent0f56057c64af1ea0ccf059f9100e0a64676d1341
BoringSSL: Fix session resumption

BoringSSL commit 533ef7304d9b48aad38805f1997031a0a034d7fe ('Remove
SSL_clear calls in handshake functions.') triggered a regression for
EAP-TLS/TTLS/PEAP session resumption in wpa_supplicant due to the
removed SSL_clear() call in ssl3_connect() going away and wpa_supplicant
not calling SSL_clear() after SSL_shutdown(). Fix this by adding the
SSL_clear() call into wpa_supplicant after SSL_shutdown() when preparing
the ssl instance for another connection.

While OpenSSL is still call SSL_clear() in ssl3_connect(), it looks to
be safe to add this call to wpa_supplicant unconditionally.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/crypto/tls_openssl.c