From ec02df83e6f41bce3a2b4d97ff013a3fd632259d Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Thu, 9 Jun 2016 13:46:34 +0100 Subject: [PATCH] Update the SSL_set_session() documentation Update the SSL_set_session() documentation to reflect the fact that old bad sessions are removed from the cache if necessary. Reviewed-by: Rich Salz --- doc/ssl/SSL_set_session.pod | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/ssl/SSL_set_session.pod b/doc/ssl/SSL_set_session.pod index 0a8a208a97..1de533f4c5 100644 --- a/doc/ssl/SSL_set_session.pod +++ b/doc/ssl/SSL_set_session.pod @@ -21,7 +21,11 @@ with the L call. If there is already a session set inside B (because it was set with SSL_set_session() before or because the same B was already used for -a connection), SSL_SESSION_free() will be called for that session. +a connection), SSL_SESSION_free() will be called for that session. If that old +session is still B, it is considered bad and will be removed from the +session cache (if used). A session is considered open, if L was +not called for the connection (or at least L was used to +set the SSL_SENT_SHUTDOWN state). =head1 NOTES -- 2.25.1