generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add cert callback retry test.

Browse Source 
(cherry picked from commit 3323314fc1c6d18e650a2de97f7cf9892ac92a60)
This commit is contained in:
Dr. Stephen Henson 2014-01-26 00:51:09 +00:00
parent ede90b1121
commit 285f7fb0f9
2 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
apps/s_cb.c
View File

@ -1264,6 +1264,16 @@ static int set_cert_cb(SSL *ssl, void *arg)
{
int i, rv;
SSL_EXCERT *exc = arg;
#ifdef CERT_CB_TEST_RETRY
static int retry_cnt;
if (retry_cnt < 5)
{
retry_cnt++;
fprintf(stderr, "Certificate callback retry test: count %d\n",
retry_cnt);
return -1;
}
#endif
SSL_certs_clear(ssl);
if (!exc)

9
apps/s_server.c
View File

@ -2610,6 +2610,15 @@ static int init_ssl_connection(SSL *con)
i=SSL_accept(con);
#ifdef CERT_CB_TEST_RETRY
{
while (i <= 0 && SSL_get_error(con,i) == SSL_ERROR_WANT_X509_LOOKUP && SSL_state(con) == SSL3_ST_SR_CLNT_HELLO_C)
{
fprintf(stderr, "LOOKUP from certificate callback during accept\n");
i=SSL_accept(con);
}
}
#endif
#ifndef OPENSSL_NO_SRP
while (i <= 0 && SSL_get_error(con,i) == SSL_ERROR_WANT_X509_LOOKUP)
{