tree 3221fb9d5ad94fa239f7922c9e35df66e301ff8c
parent 345ddf4a9bccf30d9eeff01027cb5934c00b68e9
author Emeric Brun <ebrun@haproxy.com> 1567776962 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1568104730 +0200

BUG/MAJOR: ssl: ssl_sock was not fully initialized.

'ssl_sock' wasn't fully initialized so a new session can inherit some
flags from an old one.

This causes some fetches, related to client's certificate presence or
its verify status and errors, returning erroneous values.

This issue could generate other unexpected behaviors because a new
session could also inherit other flags such as SSL_SOCK_ST_FL_16K_WBFSIZE,
SSL_SOCK_SEND_UNLIMITED, or SSL_SOCK_RECV_HEARTBEAT from an old session.

This must be backported to 2.0 but it's useless for previous.

(cherry picked from commit 5762a0db0a606cab09fbf912232ee927f99f4c2d)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>