From 43375d8443a2f26403b8c8b838687bcec68abc83 Mon Sep 17 00:00:00 2001 From: Jan Vidar Krey Date: Wed, 1 Sep 2010 23:57:55 +0200 Subject: [PATCH] Shutdown SSL on close. --- src/core/hub.c | 1 + src/network/backend.c | 3 +++ 2 files changed, 4 insertions(+) diff --git a/src/core/hub.c b/src/core/hub.c index 737e792..68f8a9f 100644 --- a/src/core/hub.c +++ b/src/core/hub.c @@ -662,6 +662,7 @@ static int load_ssl_certificates(struct hub_info* hub, struct hub_config* config /* Disable SSLv2 */ SSL_CTX_set_options(hub->ssl_ctx, SSL_OP_NO_SSLv2); + SSL_CTX_set_quiet_shutdown(hub->ssl_ctx, 1); if (SSL_CTX_use_certificate_file(hub->ssl_ctx, config->tls_certificate, SSL_FILETYPE_PEM) < 0) { diff --git a/src/network/backend.c b/src/network/backend.c index 3e8cd63..1f5579d 100644 --- a/src/network/backend.c +++ b/src/network/backend.c @@ -181,7 +181,10 @@ void net_con_close(struct net_connection* con) #ifdef SSL_SUPPORT if (con->ssl) + { + SSL_shutdown(con->ssl); SSL_clear(con->ssl); + } #endif net_close(con->sd);