Hi!

While working with ssl3_send_server_certificate() and
looking at its source code I wondered whether a possible
error return code of the ssl3_output_cert_chain() call is
checked somewhere.

Here is the piece of code (snapshot 19990218):
   1699 int ssl3_send_server_certificate(s)
[...]
   1714                 l=ssl3_output_cert_chain(s,x);

Is this return code checked somewhere or is this not necessary?

   1715                 s->state=SSL3_ST_SW_CERT_B;
   1716                 s->init_num=(int)l;

The return code gets stored here; who uses it then?
It may be 0 if ssl3_output_cert_chain() had problems.

   1717                 s->init_off=0;
   1718                 }
   1719 
   1720         /* SSL3_ST_SW_CERT_B */
   1721         return(ssl3_do_write(s,SSL3_RT_HANDSHAKE));
   1722         }

Can someone confirm that this does not raise problems?

-- 
Ciao ... Heiko Nardmann (Dipl.-Ing.)
Software Development, secunet (www.secunet.de)
Security Networks GmbH, Weidenauer Str. 223-225, D-57076 Siegen
Tel. : +49 271 48950-13                 Fax  : +49 271 48950-50
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to