]> granicus.if.org Git - curl/commit
TLS: switch off SSL session id when client cert is used
authorDaniel Stenberg <daniel@haxx.se>
Fri, 1 Jul 2016 11:32:31 +0000 (13:32 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Tue, 2 Aug 2016 22:34:27 +0000 (00:34 +0200)
commit247d890da88f9ee817079e246c59f3d7d12fde5f
tree28139567892b745d2441cc704e9a75276be9d1de
parent75dc096e01ef1e21b6c57690d99371dedb2c0b80
TLS: switch off SSL session id when client cert is used

CVE-2016-5419
Bug: https://curl.haxx.se/docs/adv_20160803A.html
Reported-by: Bru Rom
Contributions-by: Eric Rescorla and Ray Satiro
lib/url.c
lib/urldata.h
lib/vtls/vtls.c