Blame SOURCES/httpd-2.4.35-r1633085.patch

59234c
diff --git a/modules/ssl/ssl_engine_io.c b/modules/ssl/ssl_engine_io.c
59234c
index d52d5e3..8a57659 100644
59234c
--- a/modules/ssl/ssl_engine_io.c
59234c
+++ b/modules/ssl/ssl_engine_io.c
59234c
@@ -1415,6 +1415,11 @@ static apr_status_t ssl_io_filter_handshake(ssl_filter_ctx_t *filter_ctx)
59234c
                           "\"SSLVerifyClient optional_no_ca\" "
59234c
                           "configuration");
59234c
             ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server);
59234c
+
59234c
+            /* on session resumption ssl_callback_SSLVerify() 
59234c
+             * will not be called, therefore we have to set it here
59234c
+             */
59234c
+            sslconn->verify_info = "GENEROUS";
59234c
         }
59234c
         else {
59234c
             const char *error = sslconn->verify_error ?