Don't mix up pre- and post-handshake verification of clients.
authorLinus Nordberg <linus@nordu.net>
Thu, 13 Sep 2012 13:19:22 +0000 (15:19 +0200)
committerLinus Nordberg <linus@nordu.net>
Thu, 13 Sep 2012 13:19:22 +0000 (15:19 +0200)
commitdb965c9bf7cf4acc0830d7b689d69d40b9ecef8c
tree619a9203dc468d110103fed23ced010a0dc1ee28
parent8d287300f510e0559f01a2e7a4dec90674215f25
Don't mix up pre- and post-handshake verification of clients.

When verifying clients, don't consider config blocks with CA
settings ('tls') which differ from the one used for verifying the
certificate chain. Reported by Ralf Paffrath.

Reported and analysed by Ralf Paffrath.

Addresses issue RADSECPROXY-43.
ChangeLog
tls.c