]> granicus.if.org Git - mutt/commit
Prevent skipped certs from showing a second time. (see #3916)
authorKevin McCarthy <kevin@8t8.us>
Thu, 9 Mar 2017 18:56:21 +0000 (10:56 -0800)
committerKevin McCarthy <kevin@8t8.us>
Thu, 9 Mar 2017 18:56:21 +0000 (10:56 -0800)
commitd51944e2bc6f1b94b5fadf0927ae69bd443b792d
treedf3cacbd7a67be35f1091767fb8655aec7ac8b94
parent2f512db10b44e808ef509e1f35c937b0488711ba
Prevent skipped certs from showing a second time. (see #3916)

OpenSSL sometimes passes a skipped certificate to
ssl_verify_callback() a second time, with preverify_ok=1.  From
OpenSSL's viewpoint there is nothing wrong with this, but mutt will
end up showing the certificate in the interactive prompt again.

Cache the last cert and position, and compare with the latest when
skip_mode and preverify_ok are both set.
mutt_ssl.c