This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch 10.1.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/10.1.x by this push:
new 37e49116bb Add explanatory comment
37e49116bb is described below
commit 37e49116bb7ae64ba927bcac3ac6761fb9b5d754
Author: Mark Thomas <[email protected]>
AuthorDate: Thu Jun 11 15:22:23 2026 +0100
Add explanatory comment
---
java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
index 5f8b88ae0f..9fc2eaf9be 100644
--- a/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/OpenSSLEngine.java
@@ -933,6 +933,10 @@ public final class OpenSSLEngine extends SSLEngine
implements SSLUtil.ProtocolIn
int code;
if (SSL.getVersion(state.ssl).equals(Constants.SSL_PROTO_TLSv1_3)) {
code = SSL.verifyClientPostHandshake(state.ssl);
+ /*
+ * PHA doesn't increment the handshake count with OpenSSL 3.0.x so
make it look like the handshake count has
+ * been incremented.
+ */
currentHandshake = SSL.getHandshakeCount(state.ssl) - 1;
} else {
code = SSL.renegotiate(state.ssl);
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
