Update information as a partial response to the post
authorLutz Jänicke <jaenicke@openssl.org>
Fri, 12 Oct 2001 12:29:57 +0000 (12:29 +0000)
committerLutz Jänicke <jaenicke@openssl.org>
Fri, 12 Oct 2001 12:29:57 +0000 (12:29 +0000)
commitaa8a33c230ca2db03fd958c440efe111b18db2d5
treee188802f9652bd56fc20b2f9563eb8a0fb99ef96
parent46ff8e0d0ab42ddbc83a78c87e4fee0e8ab726be
Update information as a partial response to the post
  From: "Chris D. Peterson" <cpeterson@aventail.com>
  Subject: Implementation Issues with OpenSSL
  To: openssl-users@openssl.org
  Date: Wed, 22 Aug 2001 16:13:17 -0700
The patch included in the original post may improve the internal session
list handling (and is therefore worth a seperate investigation).
No change to the list handling will however solve the problems of incorrect
SSL_SESSION_free() calls. The session list is only one possible point of
failure, dangling pointers would also occur for SSL object currently
using the session. The correct solution is to only use SSL_SESSION_free()
when applicable!
doc/ssl/SSL_CTX_sess_set_get_cb.pod
doc/ssl/SSL_SESSION_free.pod
doc/ssl/SSL_get_session.pod
doc/ssl/SSL_set_session.pod
doc/ssl/d2i_SSL_SESSION.pod