summaryrefslogtreecommitdiff
path: root/ustream-io-openssl.c
diff options
context:
space:
mode:
authorJo-Philipp Wich <jo@mein.io>2019-09-11 21:09:59 +0200
committerJo-Philipp Wich <jo@mein.io>2019-11-05 14:35:17 +0100
commitc9b6668215a27f2346d5eedd6f29cc720985b448 (patch)
tree9e7304250537d453cb099a7fdfde34ef8eb34bbe /ustream-io-openssl.c
parent465f8dc31d85cdd54369a5650d5daa1d3995dfaa (diff)
downloadustream-ssl-c9b6668215a27f2346d5eedd6f29cc720985b448.tar.gz
ustream-ssl: skip writing pending data if .eof is true after connect
Check the .eof member of the underlying ustream after the call to __ustream_ssl_connect() since existing users of the library appear to set the eof flag as a way to signal connection termination upon failing certificate verification. This is a stop-gap measure to address TALOS-2019-0893 but a proper API redesign is required to give applications proper control over whether certificate failures are to be ignored or not and the default implementation without custom callbacks should always terminate on verification failures. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'ustream-io-openssl.c')
0 files changed, 0 insertions, 0 deletions