From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 25 May 2011 12:25:01 +0000 (+0000)
Subject: PR: 2505
X-Git-Tag: OpenSSL-fips-2_0-rc1~397
X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=ee4b5cebeffdf5672e1de4f69106431fc6f0426b;hp=238b63613bae5c369fd85951bea5cbfa0fdfa35c

PR: 2505
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Reviewed by: steve

Fix DTLS session resumption timer bug.
---

diff --git a/ssl/d1_clnt.c b/ssl/d1_clnt.c
index 706e228279..887e3244e7 100644
--- a/ssl/d1_clnt.c
+++ b/ssl/d1_clnt.c
@@ -408,7 +408,8 @@ int dtls1_connect(SSL *s)
 
 		case SSL3_ST_CW_CHANGE_A:
 		case SSL3_ST_CW_CHANGE_B:
-			dtls1_start_timer(s);
+			if (!s->hit)
+				dtls1_start_timer(s);
 			ret=dtls1_send_change_cipher_spec(s,
 				SSL3_ST_CW_CHANGE_A,SSL3_ST_CW_CHANGE_B);
 			if (ret <= 0) goto end;
@@ -443,7 +444,8 @@ int dtls1_connect(SSL *s)
 
 		case SSL3_ST_CW_FINISHED_A:
 		case SSL3_ST_CW_FINISHED_B:
-			dtls1_start_timer(s);
+			if (!s->hit)
+				dtls1_start_timer(s);
 			ret=dtls1_send_finished(s,
 				SSL3_ST_CW_FINISHED_A,SSL3_ST_CW_FINISHED_B,
 				s->method->ssl3_enc->client_finished_label,