Re: bug in openssl session cache

2002-02-10 Thread Lutz Jaenicke
On Thu, Feb 07, 2002 at 03:38:32PM +0200, Izhar Shoshani Levi wrote: > I found a bug in ssl session cache, please check it. > SSL_CTX_session_remove trying to find the session in the cache and delete it > but when calling SSL_SESSION_list_remove, in case that r != NULL the wrong > session is > sen

Re: bug in openssl session cache

2002-02-08 Thread Lutz Jaenicke
On Thu, Feb 07, 2002 at 03:38:32PM +0200, Izhar Shoshani Levi wrote: > I found a bug in ssl session cache, please check it. > SSL_CTX_session_remove trying to find the session in the cache and delete it > but when calling SSL_SESSION_list_remove, in case that r != NULL the wrong > session is > sen

Re: bug in openssl session cache

2002-02-07 Thread Lutz Jaenicke
On Thu, Feb 07, 2002 at 03:38:32PM +0200, Izhar Shoshani Levi wrote: > I found a bug in ssl session cache, please check it. > SSL_CTX_session_remove trying to find the session in the cache and delete it > but when calling SSL_SESSION_list_remove, in case that r != NULL the wrong > session is > sen

bug in openssl session cache

2002-02-07 Thread Izhar Shoshani Levi
Hi, I found a bug in ssl session cache, please check it. SSL_CTX_session_remove trying to find the session in the cache and delete it but when calling SSL_SESSION_list_remove, in case that r != NULL the wrong session is sent to the function, instead of sending r which is the one that is in the ca