]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
Revert "close connection on "no TLS data, but connection isn't set up""
authorAlan T. DeKok <aland@freeradius.org>
Wed, 11 Aug 2021 14:46:31 +0000 (10:46 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Wed, 11 Aug 2021 14:46:31 +0000 (10:46 -0400)
This reverts commit 75620b2fb9e7eb4f7853373fe3ffc2f67e97bb22.

not needed

src/main/tls_listen.c

index e1d13ae3e8e03c8c318e9b7aafc019aaf7c0c29e..aaf7e4937ce905241de81a543599afb09b044a5a 100644 (file)
@@ -506,21 +506,9 @@ check_for_setup:
         *      presented by the client.
         */
        if (sock->state == LISTEN_TLS_INIT) {
-               /*
-                *      If INIT isn't finished, but there's no data,
-                *      just close the connection.  The other end is
-                *      being unfriendly.
-                */
                if (!SSL_is_init_finished(sock->ssn->ssl)) {
-                       listener->status = RAD_LISTEN_STATUS_REMOVE_NOW;
-                       listener->tls = NULL; /* parent owns this! */
-                       PTHREAD_MUTEX_UNLOCK(&sock->mutex);
-
-                       /*
-                        *      Tell the event handler that an FD has disappeared.
-                        */
-                       radius_update_listener(listener);
-                       return 0;
+                       RDEBUG("FAILED in TLS handshake receive");
+                       goto do_close;
                }
 
                sock->ssn->is_init_finished = true;