]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
check for more possible SSL failures
authorGiovanni Bechis <gbechis@apache.org>
Thu, 30 Mar 2023 17:09:09 +0000 (17:09 +0000)
committerGiovanni Bechis <gbechis@apache.org>
Thu, 30 Mar 2023 17:09:09 +0000 (17:09 +0000)
bz #66225

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1908805 13f79535-47bb-0310-9956-ffa450edef68

modules/ssl/ssl_engine_kernel.c

index 8a11cf4962bb5cdc725e18679b969f9922d6fab4..27c1d2383ab80cf2e4fa97ecdf950c22a43ce55b 100644 (file)
@@ -997,10 +997,7 @@ static int ssl_hook_Access_classic(request_rec *r, SSLSrvConfigRec *sc, SSLDirCo
              * handshake to proceed. */
             modssl_set_reneg_state(sslconn, RENEG_ALLOW);
 
-            SSL_renegotiate(ssl);
-            SSL_do_handshake(ssl);
-
-            if (!SSL_is_init_finished(ssl)) {
+            if(!SSL_renegotiate(ssl) || !SSL_do_handshake(ssl) || !SSL_is_init_finished(ssl)) {
                 ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02225)
                               "Re-negotiation request failed");
                 ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, r->server);