Move peer chain to SSL_SESSION structure.
Reviewed-by: Richard Levitte <levitte@openssl.org>
This commit is contained in:
@@ -3206,8 +3206,8 @@ int ssl3_get_client_certificate(SSL *s)
|
||||
goto done;
|
||||
}
|
||||
}
|
||||
sk_X509_pop_free(s->session->sess_cert->cert_chain, X509_free);
|
||||
s->session->sess_cert->cert_chain = sk;
|
||||
sk_X509_pop_free(s->session->peer_chain, X509_free);
|
||||
s->session->peer_chain = sk;
|
||||
/*
|
||||
* Inconsistency alert: cert_chain does *not* include the peer's own
|
||||
* certificate, while we do include it in s3_clnt.c
|
||||
|
Reference in New Issue
Block a user