Make sure to NUL-terminate the string on end-of-file (and error)

[openssl.git] / bugs / SSLv3

diff --git a/bugs/SSLv3 b/bugs/SSLv3
index 2e22a65cddc7fc2117e7e1241f1c2fe9048d560a..db53e1343a0e0b23edc70a226dcac175c721f816 100644 (file)
--- a/bugs/SSLv3
+++ b/bugs/SSLv3
@@ -39,3 +39,11 @@ SSL_shutdown() and still sharing the socket with its parent).
 
 Netscape, when using export ciphers, will accept a 1024 bit temporary
 RSA key.  It is supposed to only accept 512.
+
+If Netscape connects to a server which requests a client certificate
+it will frequently hang after the user has selected one and never
+complete the connection. Hitting "Stop" and reload fixes this and
+all subsequent connections work fine. This appears to be because 
+Netscape wont read any new records in when it is awaiting a server
+done message at this point. The fix is to send the certificate request
+and server done messages in one record.