openssl/include
Tomas Mraz dfb39f7313 Replace handling of negative verification result with SSL_set_retry_verify()
Provide a different mechanism to indicate that the application wants
to retry the verification. The negative result of the callback function
now indicates an error again.

Instead the SSL_set_retry_verify() can be called from the callback
to indicate that the handshake should be suspended.

Fixes #17568

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17825)
2022-03-14 09:39:03 +01:00
..
crypto EVP_MD performance fix (refcount cache contention) 2022-03-13 11:43:26 +11:00
internal Add TFO support to socket BIO and s_client/s_server 2022-03-10 10:42:43 -05:00
openssl Replace handling of negative verification result with SSL_set_retry_verify() 2022-03-14 09:39:03 +01:00