Merge pull request #4 from baudehlo/master

Fix for starttls vulnerability
This commit is contained in:
Robert 2011-06-24 14:05:42 -07:00
commit cd5f088d69

View File

@ -275,6 +275,7 @@ sub upgrade_socket {
my UpgradeClientSSL $self = shift; my UpgradeClientSSL $self = shift;
unless ( $self->{_ssl_started} ) { unless ( $self->{_ssl_started} ) {
$self->{_stashed_qp}->clear_data();
IO::Socket::SSL->start_SSL( IO::Socket::SSL->start_SSL(
$self->{_stashed_qp}->{sock}, { $self->{_stashed_qp}->{sock}, {
SSL_use_cert => 1, SSL_use_cert => 1,