Clear SSL error stack on each new SSL ctx

aperera · Jul 28, 2008 · ac3d0f9 · ac3d0f9
1 parent 8290498
commit ac3d0f9
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/sx/ssl.c b/sx/ssl.c
@@ -700,8 +700,6 @@ int sx_ssl_init(sx_env_t env, sx_plugin_t p, va_list args) {
         SSL_load_error_strings();
     }
     sx_openssl_initialized = 1;
-	/* begin with fresh error stack */
-	ERR_clear_error();
 
     ret = sx_ssl_server_addcert(p, name, pemfile, cachain, mode);
     if(ret)
@@ -740,6 +738,9 @@ int sx_ssl_server_addcert(sx_plugin_t p, char *name, char *pemfile, char *cachai
     if(pemfile == NULL)
         return 1;
 
+    /* begin with fresh error stack */
+    ERR_clear_error();
+
     /* create the context */
     ctx = SSL_CTX_new(SSLv23_method());
     if(ctx == NULL) {