From 5c945995ef992282e787eade48d52ae7047d7ae0 Mon Sep 17 00:00:00 2001
From: aland <aland>
Date: Sat, 10 Nov 2007 06:45:51 +0000
Subject: [PATCH] 	Return EAPTLS_OK only if the SSL setup is finished,
 AND there's 	no more data inside of the tunnel

---
 src/modules/rlm_eap/libeap/eap_tls.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/modules/rlm_eap/libeap/eap_tls.c b/src/modules/rlm_eap/libeap/eap_tls.c
index db14838..84a6aff 100644
--- a/src/modules/rlm_eap/libeap/eap_tls.c
+++ b/src/modules/rlm_eap/libeap/eap_tls.c
@@ -763,7 +763,7 @@ eaptls_status_t eaptls_process(EAP_HANDLER *handler)
 	 *
 	 *	The TLS data will be in the tls_session structure.
 	 */
-	if (SSL_is_init_finished(tls_session->ssl)) {
+	if (SSL_is_init_finished(tls_session->ssl) && (status == EAPTLS_OK)) {
 		eaptls_free(&tlspacket);
 		return EAPTLS_OK;
 	}
-- 
2.1.4