From: Florin Coras <fcoras@cisco.com>
Date: Fri, 12 May 2023 00:40:26 +0000 (-0700)
Subject: tls: flag no app session on handshake failure
X-Git-Tag: v23.10-rc0~17
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=d35c71c2f1bc1f4a5119f6944dad26fa0eff27c3;p=vpp.git

tls: flag no app session on handshake failure

If openssl tls server handshake fails, track the fact that the context
does not have an app session.

Type: fix

Signed-off-by: Florin Coras <fcoras@cisco.com>
Change-Id: I5f493059a3610067b59caffbbe441ce9e0868252
---

diff --git a/src/plugins/tlsopenssl/tls_openssl.c b/src/plugins/tlsopenssl/tls_openssl.c
index 426bf2fe1e5..97b32bd405f 100644
--- a/src/plugins/tlsopenssl/tls_openssl.c
+++ b/src/plugins/tlsopenssl/tls_openssl.c
@@ -273,10 +273,10 @@ openssl_handle_handshake_failure (tls_ctx_t * ctx)
       if (app_session)
 	{
 	  session_free (app_session);
-	  ctx->no_app_session = 1;
 	  ctx->c_s_index = SESSION_INVALID_INDEX;
 	  tls_disconnect_transport (ctx);
 	}
+      ctx->no_app_session = 1;
     }
   else
     {