tree a5d3859c55ae8f22bd6605c80c1f6d67a1fce786
parent ed5ac9c78652bd2c75d1c535f54e6bf4191d232e
author Emeric Brun <ebrun@haproxy.com> 1567776962 +0200
committer Willy Tarreau <w@1wt.eu> 1567784013 +0200
encoding latin1

BUG/MAJOR: ssl: ssl_sock was not fully initialized.

'ssl_sock' wasn't fully initialized so a new session can inherit some
flags from an old one.

This causes some fetches, related to client's certificate presence or
its verify status and errors, returning erroneous values.

This issue could generate other unexpected behaviors because a new
session could also inherit other flags such as SSL_SOCK_ST_FL_16K_WBFSIZE,
SSL_SOCK_SEND_UNLIMITED, or SSL_SOCK_RECV_HEARTBEAT from an old session.

This must be backported to 2.0 but it's useless for previous.