Fix security hole.

[openssl.git] / ssl / s3_srvr.c

diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index 56d8dd4737bd647b003c5a52310d4279307baa25..21b93c1ba4a6c5f3dc5394a1b14e366978fa4fd4 100644 (file)
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -1683,6 +1683,8 @@ SSL *s;
        if (s->session->peer != NULL)
                X509_free(s->session->peer);
        s->session->peer=(X509 *)sk_shift(sk);
+       s->session->cert->cert_chain=sk;
+       sk=NULL;
 
        ret=1;
        if (0)