Flush the OpenSSL error queue before each BIO op.

diff --git a/postfix/src/tls/tls_bio_ops.c b/postfix/src/tls/tls_bio_ops.c
index 93d3535d75044ddcfd1391b2b3144a40703fa276..39818f8159a0c90f8329e790d6bd59e5e8bc0ecb 100644 (file)
--- a/postfix/src/tls/tls_bio_ops.c
+++ b/postfix/src/tls/tls_bio_ops.c
@@ -196,6 +196,12 @@ int     tls_bio(int fd, int timeout, TLS_SESS_STATE *TLScontext,
      * handling any pending network I/O.
      */
     for (;;) {
+        /*
+         * Flush stale data from SSL error queue, stale errors can confuse
+         * SSL_get_error().
+         */
+        ERR_clear_error();
+
        if (hsfunc)
            status = hsfunc(TLScontext->con);
        else if (rfunc)