diff --git a/tmcd/ssl.c b/tmcd/ssl.c index 2a02e5e6894e9f62ffbef7e8720c983c1c3465a4..e64943a4f28854246a1d568806a907a8b5b94b07 100644 --- a/tmcd/ssl.c +++ b/tmcd/ssl.c @@ -117,6 +117,11 @@ tmcd_server_sslinit(void) SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); + /* + * No session caching! Useless and eats up memory. + */ + SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF); + return 0; } @@ -184,6 +189,11 @@ tmcd_client_sslinit(void) SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, 0); + /* + * No session caching! Useless and eats up memory. + */ + SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF); + return 0; } @@ -471,6 +481,7 @@ tmcd_sslclose(int sock) } SSL_free(ssl); ssl = NULL; + ERR_clear_error(); } nosslbuflen = 0; close(sock);