]> granicus.if.org Git - curl/commit
darwinssl: fix session ID keys to only reuse identical sessions
authorDaniel Stenberg <daniel@haxx.se>
Fri, 19 Dec 2014 07:50:00 +0000 (08:50 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 7 Jan 2015 21:55:56 +0000 (22:55 +0100)
commit4ce22c607be9066b321f3eb3c524a6fff251a1e2
tree95ce53833346862ceaafa192467cac446d937701
parent3df8e78860d3a3d3cf95252bd2b4ad5fd53360cd
darwinssl: fix session ID keys to only reuse identical sessions

...to avoid a session ID getting cached without certificate checking and
then after a subsequent _enabling_ of the check libcurl could still
re-use the session done without cert checks.

Bug: http://curl.haxx.se/docs/adv_20150108A.html
Reported-by: Marc Hesse
lib/vtls/curl_darwinssl.c