Wietse Venema:
> It works around an undocumented OpenSSL mis-feature, by moving the
> SSL_set_fd() call from tlsproxy(8) into the Postfix TLS library.
> Apparently, SSL_set_fd() destroys call-back information that is
> already set up on an SSL handle. That was causing tlsproxy(8)'s
> verbose logging to go nowhere.

This behavior is actually documented (SSL_set_fd() destroys
a BIO already on the SSL handle, and creates a new BIO).

        Wietse

Reply via email to