[openssl.org #3090] Infinite loop in openssl s_client when verify error Different CRL scope occurs

2013-07-12 Thread Stephen Henson via RT
On Thu Jul 11 23:50:49 2013, f...@open.ch wrote: Following bug occurred with s_client under * OpenSSL 1.0.1c 10 May 2012 * OpenSSL 1.0.1e 11 Feb 2013. However, not triggered with s_client under * OpenSSL 0.9.8x 10 May 2012. API calls tested and failed under * OpenSSL 1.0.1c 10 May 2012.

[openssl.org #3090] Infinite loop in openssl s_client when verify error Different CRL scope occurs

2013-07-12 Thread Stephen Henson via RT
On Fri Jul 12 14:22:46 2013, steve wrote: Obviously the loop shouldn't happen: I'll look into fixing that. Should be fixed with this: http://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4b26645c1a71cf9ce489e4f79fc836760b670ffe Regards, Steve. -- Dr Stephen N. Henson. OpenSSL project

reset renegotiation time/byte count when one is requested

2013-07-12 Thread Alvaro Herrera
I noticed that whenever renegotiation happens because of the automatic control by time or byte count, the other counter is not reset when one of them happens. So if you have both enabled, you might have more renegotiations than you wanted: perhaps the byte count is about to reach the threshold