tree f56ff833ed8a183c6aca2f131e1ea1030541bdd7
parent 78617e51fd6a8972f13b080cfb116d22f25bcee8
author Emeric Brun <ebrun@exceliance.fr> 1354537469 +0100
committer Willy Tarreau <w@1wt.eu> 1354559980 +0100

BUG/MEDIUM: ssl: first outgoing connection would fail with {ca,crt}-ignore-err

When using ca_ignore_err/crt_ignore_err, a connection to an untrusted
server raises an error which is ignored. But the next SSL_read() that
encounters EAGAIN raises the error again, breaking the connection.

Subsequent connections don't have this problem because the session has
been stored and is correctly reused without performing a verify again.

The solution consists in correctly flushing the SSL error stack when
ignoring the crt/ca error.