X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=ssl%2Fs3_clnt.c;h=5adbb50485b435f91b24099afbea91c321cdd8b4;hp=e9c1518810b53346e231b14bae53b2f8e59697a7;hb=6dbb6219e7a6a5f94c9e7b0a25f0ce7c733f5060;hpb=ec4a50b3c3f2f50caccfd52e939857a5d6f02fd1

diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c
index e9c1518810..5adbb50485 100644
--- a/ssl/s3_clnt.c
+++ b/ssl/s3_clnt.c
@@ -1963,6 +1963,12 @@ int ssl3_get_certificate_request(SSL *s)
 			SSLerr(SSL_F_SSL3_GET_CERTIFICATE_REQUEST,SSL_R_DATA_LENGTH_TOO_LONG);
 			goto err;
 			}
+		/* Clear certificate digests and validity flags */
+		for (i = 0; i < SSL_PKEY_NUM; i++)
+			{
+			s->cert->pkeys[i].digest = NULL;
+			s->cert->pkeys[i].valid_flags = 0;
+			}
 		if ((llen & 1) || !tls1_process_sigalgs(s, p, llen))
 			{
 			ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_DECODE_ERROR);