On Mon, Oct 11, 1999, [EMAIL PROTECTED] wrote:
> Full_Name: Andreas Persson
> Version:
> OS:
> Submission from: idasys-059.idasys.se (194.218.15.59)
>
> For me, the inter-process session cache seems to work correctly only
> for the first five minutes after a server start. After that a lot of
> unexpected cache misses occur. I think I've found the problem; in
> ssl_enginge_scache.c, line 548-549 and 836-837 read:
>
> if (tExpiresAt >= tNow)
> bDelete = TRUE;
>
> I believe it should be <= instead. Or am I missing something?
Uuuuuaaaa, you're right, of course. How could it be that we've overlooked this
subtle bug for such a long time? It should be <= at both locations, of
course. This is now fixed for mod_ssl 2.4.6. Thanks a lot for discovering this
nasty semantical bug.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
