From 604f67f52109383f6aefc7c5bf2befaf7182eb98 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Mon, 30 Nov 2015 13:29:41 +0000 Subject: [PATCH] Ensure we don't call the OCSP callback if resuming a session It makes no sense to call the OCSP status callback if we are resuming a session because no certificates will be sent. Reviewed-by: Viktor Dukhovni (cherry picked from commit 0ac6239955965f58f9dddb4229e8cd58e0dba20d) --- ssl/t1_lib.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index 090e271b17..2e9b65b3fd 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c @@ -2089,7 +2089,7 @@ int ssl_check_serverhello_tlsext(SSL *s) * callback */ if ((s->tlsext_status_type != -1) && !(s->tlsext_status_expected) - && s->ctx && s->ctx->tlsext_status_cb) { + && !(s->hit) && s->ctx && s->ctx->tlsext_status_cb) { int r; /* * Call callback with resp == NULL and resplen == -1 so callback -- 2.25.1