Re: [openssl.org #2506] [PATCH] SSL_clear not fully implemented for DTLS

2011-05-18 Thread Robin Seggelmann via RT
This patch needed to be updated again. The newly implemented SSL_clear() also reset the listening state while listening, that is breaking DTLSv1_listen(). The listening state is now saved before the DTLS state is reset in dtls1_accept(). Best regards Robin --- ssl/d1_lib.c3 Apr 2011

Re: [openssl.org #2506] [PATCH] SSL_clear not fully implemented for DTLS

2011-05-06 Thread Robin Seggelmann via RT
Here is an updated version of the patch, also addressing the memory leak reported in #1714. Best regards Robin --- ssl/d1_lib.c3 Apr 2011 17:14:48 - 1.8.2.13.2.1 +++ ssl/d1_lib.c6 May 2011 12:40:39 - @@ -129,26 +129,33 @@ return(1); } -void dtls

[openssl.org #2506] [PATCH] SSL_clear not fully implemented for DTLS

2011-04-27 Thread Robin Seggelmann via RT
The implementation of dtls1_clear(), called by SSL_clear(), is not handling the DTLS1_STATE struct at s->d1. Hence, calling SSL_clear() does not reset any value stored in this struct, which includes epochs, sequence numbers, replay check bitmask, buffered messages, etc. This also prevents the -r