From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 13 Sep 2015 18:04:58 +0000 (+0100)
Subject: Handle SSL_ERROR_WANT_X509_LOOKUP
X-Git-Tag: OpenSSL_1_1_0-pre1~576
X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=f1c412c9e63f7c9cac2c723bff09cce563dda1b0

Handle SSL_ERROR_WANT_X509_LOOKUP

Reviewed-by: Rich Salz <rsalz@openssl.org>
---

diff --git a/ssl/bio_ssl.c b/ssl/bio_ssl.c
index 639b10556a..a8260c9c43 100644
--- a/ssl/bio_ssl.c
+++ b/ssl/bio_ssl.c
@@ -407,6 +407,10 @@ static long ssl_ctrl(BIO *b, int cmd, long num, void *ptr)
             BIO_set_flags(b, BIO_FLAGS_IO_SPECIAL | BIO_FLAGS_SHOULD_RETRY);
             b->retry_reason = b->next_bio->retry_reason;
             break;
+        case SSL_ERROR_WANT_X509_LOOKUP:
+            BIO_set_retry_special(b);
+            b->retry_reason = BIO_RR_SSL_X509_LOOKUP;
+            break;
         default:
             break;
         }