[patch] Fix for TLS Stateless Session Ticket Extension

openssl-0.9.8g-session-cache.patch (text/plain), 862 bytes, created by Anton Bolshakov on 2008-08-20 01:53:47 UTC

--- ssl/s3_srvr.c.orig	2008-08-16 22:10:24.000000000 +0600
+++ ssl/s3_srvr.c	2008-08-16 22:12:02.000000000 +0600
@@ -1093,8 +1093,16 @@
 		 * session-id if we want it to be single use.
 		 * Currently I will not implement the '0' length session-id
 		 * 12-Jan-98 - I'll now support the '0' length stuff.
+		 *
+		 * We also have an additional case where stateless session
+		 * resumption is successful: we always send back the old
+		 * session id. In this case s->hit is non zero: this can
+		 * only happen if stateless session resumption is succesful
+		 * if session caching is disabled so existing functionality
+		 * is unaffected.
 		 */
-		if (!(s->ctx->session_cache_mode & SSL_SESS_CACHE_SERVER))
+		if (!(s->ctx->session_cache_mode & SSL_SESS_CACHE_SERVER)
+			&& !s->hit)
 			s->session->session_id_length=0;
 
 		sl=s->session->session_id_length;