Store a reference to the peer certificate (if any) upon completion of the

handshake. Free the reference when we reset the TLS context.

ok beck@

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/libtls/tls_internal.h b/src/lib/libtls/tls_internal.h
index a5399d5594..b514847cfe 100644
--- a/src/lib/libtls/tls_internal.h
+++ b/src/lib/libtls/tls_internal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls_internal.h,v 1.18 2015/09/10 10:14:20 jsing Exp $ */
+/* $OpenBSD: tls_internal.h,v 1.19 2015/09/11 09:24:54 jsing Exp $ */
 /*
  * Copyright (c) 2014 Jeremie Courreges-Anglas <jca@openbsd.org>
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
@@ -67,6 +67,7 @@ struct tls {
 
         SSL *ssl_conn;
         SSL_CTX *ssl_ctx;
+        X509 *ssl_peer_cert;
 };
 
 struct tls *tls_new(void);