From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 9 Jan 2025 21:40:58 +0000 (-0500)
Subject: call SSL_set_connect_state() when starting client context
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5103f5a465b2ed0db7e14f4dfc7756fc6c78cf79;p=thirdparty%2Ffreeradius-server.git

call SSL_set_connect_state() when starting client context
---

diff --git a/src/lib/tls/session.c b/src/lib/tls/session.c
index 9d540c38ee5..46cbb29e338 100644
--- a/src/lib/tls/session.c
+++ b/src/lib/tls/session.c
@@ -1692,6 +1692,14 @@ fr_tls_session_t *fr_tls_session_alloc_client(TALLOC_CTX *ctx, SSL_CTX *ssl_ctx)
 	SSL_set_msg_callback_arg(tls_session->ssl, tls_session);
 	SSL_set_info_callback(tls_session->ssl, fr_tls_session_info_cb);
 
+	/*
+	 *	In Client mode we only accept.
+	 *
+	 *	This sets up the SSL session to work correctly with
+	 *	fr_tls_session_handshake.
+	 */
+	SSL_set_connect_state(tls_session->ssl);
+
 	/*
 	 *	Always verify the peer certificate.
 	 */
@@ -1884,7 +1892,7 @@ fr_tls_session_t *fr_tls_session_alloc_server(TALLOC_CTX *ctx, SSL_CTX *ssl_ctx,
 	 *	In Server mode we only accept.
 	 *
 	 *	This sets up the SSL session to work correctly with
-	 *	fr_tls_session_handhsake.
+	 *	fr_tls_session_handshake.
 	 */
 	SSL_set_accept_state(tls_session->ssl);