Hey guys! I've just stumbled following flag while trying to debug node.js test failures regarding to the `renegotiate` method that I've just added. What I was wondering is, basically, why isn't OpenSSL sending CertificateRequest to client if it sees that session was resumed?
Particularly, my problem has happened because initially server was accepting connection without SSL_VERIFY_PEER flag, and then renegotiating it after setting SSL_VERIFY_PEER. And, because of session renegotiation, no certificate was requested from client. And, no surprise, client verification has failed. Is it a bug, or an intended behaviour? (if it's a bug, please let me know and I'll send you a patch for it ;) ) Cheers, Fedor.
