Ensure that the session ID context of an SSL* is updated

when its SSL_CTX is updated.

From BoringSSL commit
https://boringssl.googlesource.com/boringssl/+/a5dc545bbcffd9c24cebe65e9ab5ce72d4535e3a

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 61aa44ca99)
This commit is contained in:
Adam Langley
2015-01-05 17:28:33 +01:00
committed by Emilia Kasper
parent 5951cc004b
commit 2357cd2e20
2 changed files with 22 additions and 0 deletions

View File

@@ -4,6 +4,13 @@
Changes between 1.0.1j and 1.0.1k [xx XXX xxxx]
*) Ensure that the session ID context of an SSL is updated when its
SSL_CTX is updated via SSL_set_SSL_CTX.
The session ID context is typically set from the parent SSL_CTX,
and can vary with the CTX.
[Adam Langley]
*) Fix various certificate fingerprint issues.
By using non-DER or invalid encodings outside the signed portion of a