Commit 30551400 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Do not discard cached handshake records during resumed sessions: 

they are used for mac computation.
parent 0702150f

ssl/s3_srvr.c

+2 −4
Original line number Diff line number Diff line
@@ -1067,7 +1067,6 @@ int ssl3_get_client_hello(SSL *s) 
			goto f_err;

			}

		s->s3->tmp.new_cipher=c;

		ssl3_digest_cached_records(s);

		}

	else

		{
@@ -1098,11 +1097,10 @@ int ssl3_get_client_hello(SSL *s) 
		else

#endif

		s->s3->tmp.new_cipher=s->session->cipher;

		/* Clear cached handshake records */

		BIO_free(s->s3->handshake_buffer);

		s->s3->handshake_buffer = NULL;

		}



	ssl3_digest_cached_records(s);

	

	/* we now have the following setup. 

	 * client_random

	 * cipher_list 		- our prefered list of ciphers