Fix STARTTLS vulnerability for async

This commit is contained in:
Matt Sergeant 2011-06-02 12:57:50 -04:00
parent b7668c0468
commit 5200244031

View File

@ -275,6 +275,7 @@ sub upgrade_socket {
my UpgradeClientSSL $self = shift; my UpgradeClientSSL $self = shift;
unless ( $self->{_ssl_started} ) { unless ( $self->{_ssl_started} ) {
$self->{_stashed_qp}->clear_data();
IO::Socket::SSL->start_SSL( IO::Socket::SSL->start_SSL(
$self->{_stashed_qp}->{sock}, { $self->{_stashed_qp}->{sock}, {
SSL_use_cert => 1, SSL_use_cert => 1,