52592b
# ./pullrev.sh 1851471
52592b
http://svn.apache.org/viewvc?view=revision&revision=1851471
52592b
52592b
--- httpd-2.4.37/modules/ssl/ssl_engine_io.c
52592b
+++ httpd-2.4.37/modules/ssl/ssl_engine_io.c
52592b
@@ -200,6 +200,8 @@
52592b
     apr_bucket *e;
52592b
     int need_flush;
52592b
 
52592b
+    BIO_clear_retry_flags(bio);
52592b
+
52592b
     /* Abort early if the client has initiated a renegotiation. */
52592b
     if (outctx->filter_ctx->config->reneg_state == RENEG_ABORT) {
52592b
         outctx->rc = APR_ECONNABORTED;
52592b
@@ -206,12 +208,6 @@
52592b
         return -1;
52592b
     }
52592b
 
52592b
-    /* when handshaking we'll have a small number of bytes.
52592b
-     * max size SSL will pass us here is about 16k.
52592b
-     * (16413 bytes to be exact)
52592b
-     */
52592b
-    BIO_clear_retry_flags(bio);
52592b
-
52592b
     /* Use a transient bucket for the output data - any downstream
52592b
      * filter must setaside if necessary. */
52592b
     e = apr_bucket_transient_create(in, inl, outctx->bb->bucket_alloc);
52592b
@@ -458,6 +454,8 @@
52592b
     if (!in)
52592b
         return 0;
52592b
 
52592b
+    BIO_clear_retry_flags(bio);
52592b
+
52592b
     /* Abort early if the client has initiated a renegotiation. */
52592b
     if (inctx->filter_ctx->config->reneg_state == RENEG_ABORT) {
52592b
         inctx->rc = APR_ECONNABORTED;
52592b
@@ -464,8 +462,6 @@
52592b
         return -1;
52592b
     }
52592b
 
52592b
-    BIO_clear_retry_flags(bio);
52592b
-
52592b
     if (!inctx->bb) {
52592b
         inctx->rc = APR_EOF;
52592b
         return -1;