the_Foundation [release-1.0]

TlsRequest: Session cache; X509 chain copying

=> Jaakko Keränen

Tue Mar 1 12:36:28 2022 +0200

Sessions are now cached for 10 minutes, to avoid repeated handshakes on frequent connections.

There was a problem with duplicating X509 chains: while the stack was duplicated, the contained X509 certs were not. This made it possible that certs in a copied stack had been released when they were needed later.

 src/tlsrequest.c | 153 +++++++++++++++++++++++++++++++++++++++++++++++--------
 1 file changed, 132 insertions(+), 21 deletions(-)

=> Diff (Colored) | Diff (Colored, Plain Text) | 🔨 Patch

=> Parent 6a1ed95 | Repository