In function ssl3_send_client_verify(), the state
is never switched to SSL3_ST_CW_CERT_VRFY_B after
the handshake message is serialized.

It's a fairly minor bug:

                *(d++)=SSL3_MT_CERTIFICATE_VERIFY;
                l2n3(n,d);

                s->init_num=(int)n+4;
                s->init_off=0;
>
>               s->state=SSL3_ST_CW_CERT_VRFY_B;
                }
        return(ssl3_do_write(s,SSL3_RT_HANDSHAKE));
err:
        return(-1);
        }
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to