Changeset c38a4e9 in mod_gnutls

Timestamp:

Jun 30, 2009, 2:42:11 PM (10 years ago)

Author:

Nokis Mavrogiannopoulos <nmav@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, upstream

Children:

c05a8bb

Parents:

1c90c18

git-author:

Nikos Mavrogiannopoulos <nmav@…> (06/30/09 14:42:11)

git-committer:

Nokis Mavrogiannopoulos <nmav@…> (06/30/09 14:42:11)

Message:

Avoid requesting certificate from client when we already have it. Patch by AlainKnaff?.

File:

• src/gnutls_hooks.c (modified) (1 diff)

src/gnutls_hooks.c

@@ -808 +808 @@
                           ctxt->sc->client_verify_mode,
                           dc->client_verify_mode);
+
+            /* If we already have a client certificate, there's no point in
+             * re-handshaking... */
+            rv = mgs_cert_verify(r, ctxt);
+            if (rv != DECLINED && rv != HTTP_FORBIDDEN)
+                return rv;
 
             gnutls_certificate_server_set_request(ctxt->session,