RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-02-18 11:47:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

BUG/MEDIUM: ssl: Fix handshake failure on session resumption with client cert.

Browse Source 
Openssl session_id_context was not set on cached sessions so handshake returns an error.
This commit is contained in:
Emeric Brun 2012-11-26 18:37:12 +01:00 committed by Willy Tarreau
parent 78bbeb4a99
commit 786991e8b7
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
include/proto/shctx.h
View File

@ -29,6 +29,10 @@
#define SHCTX_DEFAULT_SIZE 20000
#endif
#ifndef SHCTX_APPNAME
#define SHCTX_APPNAME "haproxy"
#endif
#define SHSESS_MAX_ENCODED_LEN SSL_MAX_SSL_SESSION_ID_LENGTH \
+ SHSESS_MAX_DATA_LEN \
+ SHSESS_MAX_FOOTER_LEN

3
src/shctx.c
View File

@ -447,6 +447,9 @@ void shared_context_set_cache(SSL_CTX *ctx)
SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_SERVER |
SSL_SESS_CACHE_NO_INTERNAL |
SSL_SESS_CACHE_NO_AUTO_CLEAR);
SSL_CTX_set_session_id_context(ctx, (const unsigned char *)SHCTX_APPNAME, strlen(SHCTX_APPNAME));
if (!shctx)
return;