From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Mon, 28 Mar 2022 17:56:08 +0000 (-0600)
Subject: We still need the request for state reset
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=62c7f1cd048a42577514de6fadd700c0639f1ff4;p=thirdparty%2Ffreeradius-server.git

We still need the request for state reset
---

diff --git a/src/lib/tls/cache.c b/src/lib/tls/cache.c
index 003c641ffed..a4f00340579 100644
--- a/src/lib/tls/cache.c
+++ b/src/lib/tls/cache.c
@@ -1095,14 +1095,17 @@ void fr_tls_cache_deny(request_t *request, fr_tls_session_t *tls_session)
 	 *	clear external data.
 	 */
 	if (tls_session->session) SSL_CTX_remove_session(tls_session->ctx, tls_session->session);
-	if (tmp_bind) fr_tls_session_request_unbind(tls_session->ssl);
-
 	tls_session->allow_session_resumption = false;
 
 	/*
 	 *	Clear any pending store requests.
 	 */
 	tls_cache_store_state_reset(fr_tls_session_request(tls_session->ssl), tls_cache);
+
+	/*
+	 *	Unbind the request last...
+	 */
+	if (tmp_bind) fr_tls_session_request_unbind(tls_session->ssl);
 }
 
 /** Cleanup any memory allocated by OpenSSL