Blame SOURCES/httpd-2.4.35-r1633085.patch

e71654
diff --git a/modules/ssl/ssl_engine_io.c b/modules/ssl/ssl_engine_io.c
e71654
index d52d5e3..8a57659 100644
e71654
--- a/modules/ssl/ssl_engine_io.c
e71654
+++ b/modules/ssl/ssl_engine_io.c
e71654
@@ -1415,6 +1415,11 @@ static apr_status_t ssl_io_filter_handshake(ssl_filter_ctx_t *filter_ctx)
e71654
                           "\"SSLVerifyClient optional_no_ca\" "
e71654
                           "configuration");
e71654
             ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server);
e71654
+
e71654
+            /* on session resumption ssl_callback_SSLVerify() 
e71654
+             * will not be called, therefore we have to set it here
e71654
+             */
e71654
+            sslconn->verify_info = "GENEROUS";
e71654
         }
e71654
         else {
e71654
             const char *error = sslconn->verify_error ?