You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2026/06/16 08:44:20 UTC
(tomcat) branch main updated: Add clarifying comment
This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 0ca738c64a Add clarifying comment
0ca738c64a is described below
commit 0ca738c64a903931a86fa591ce5ed2f3073f5a4c
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Tue Jun 16 09:44:07 2026 +0100
Add clarifying comment
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 1e4d4a88d1..feb1436967 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -917,6 +917,10 @@ public final class OpenSSLEngine extends SSLEngine implements SSLUtil.ProtocolIn
if (SSL_get_version(state.ssl).getString(0).equals(Constants.SSL_PROTO_TLSv1_3)) {
state.phaState = PHAState.START;
code = SSL_verify_client_post_handshake(state.ssl);
+ /*
+ * PHA doesn't increment the handshake count with OpenSSL 3.0.x so make it look like the handshake count has
+ * been incremented.
+ */
currentHandshake = state.handshakeCount - 1;
} else {
code = SSL_renegotiate(state.ssl);
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org