curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: TLS connection re-usage on the same hostname with different client certificate

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Fri, 10 Dec 2021 08:35:27 +0100 (CET)

On Mon, 6 Dec 2021, Yongkang Huang via curl-library wrote:

> For some more context, we use client cert mTLS for both https proxy and
> remote server. So If 2 different TLS to remote go through the same TL
> connection to https proxy, it would trigger the issue described above.

If so, it's a bug. I believe this code part is supposed to handle this case:

https://github.com/curl/curl/blob/96c815c22e957e50ad12634deeaa418983b63ec2/lib/url.c#L1291-L1308

-- 
  / daniel.haxx.se
  | Commercial curl support up to 24x7 is available!
  | Private help, bug fixes, support, ports, new features
  | https://curl.se/support.html
-- 
Unsubscribe: https://lists.haxx.se/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html
Received on 2021-12-10