diff options
author | Marko Mäkelä <marko.makela@mariadb.com> | 2021-03-19 13:35:18 +0200 |
---|---|---|
committer | Marko Mäkelä <marko.makela@mariadb.com> | 2021-03-19 13:35:18 +0200 |
commit | 00528a04457d33210baceba1a79e82ea126b48bd (patch) | |
tree | dab4b198ef2e8a1473d9bbdc9c0fcd879cc4cd3c /vio | |
parent | dbe941e06fe51fe0ff30dff5f1ae62960ff4fc61 (diff) | |
parent | 233c09138f10830ec07ca6a5277f18d415806ece (diff) | |
download | mariadb-git-00528a04457d33210baceba1a79e82ea126b48bd.tar.gz |
Merge 10.5 into 10.6
Diffstat (limited to 'vio')
-rw-r--r-- | vio/viossl.c | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/vio/viossl.c b/vio/viossl.c index 04bc0e41ae9..590b78f24cd 100644 --- a/vio/viossl.c +++ b/vio/viossl.c @@ -95,6 +95,21 @@ static my_bool ssl_should_retry(Vio *vio, int ret, enum enum_vio_io_event *event SSL *ssl= vio->ssl_arg; my_bool should_retry= TRUE; +#if defined(ERR_LIB_X509) && defined(X509_R_CERT_ALREADY_IN_HASH_TABLE) + /* + Ignore error X509_R_CERT_ALREADY_IN_HASH_TABLE. + This is a workaround for an OpenSSL bug in an older (< 1.1.1) + OpenSSL version. + */ + unsigned long err = ERR_peek_error(); + if (ERR_GET_LIB(err) == ERR_LIB_X509 && + ERR_GET_REASON(err) == X509_R_CERT_ALREADY_IN_HASH_TABLE) + { + ERR_clear_error(); + return TRUE; + } +#endif + /* Retrieve the result for the SSL I/O operation. */ ssl_error= SSL_get_error(ssl, ret); |