From: Tony Finch <dot@dotat.at>
Date: Tue, 5 Nov 2013 12:18:02 +0000 (+0000)
Subject: Correctly close the server side of TLS when forking for delivery.
X-Git-Tag: exim-4_83_RC1~109
X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/a400eccf287c55558ae7197c831828cf10b0a35c

Correctly close the server side of TLS when forking for delivery.
---

diff --git a/src/src/daemon.c b/src/src/daemon.c
index 3467f14a7..8e61dcf87 100644
--- a/src/src/daemon.c
+++ b/src/src/daemon.c
@@ -639,7 +639,7 @@ if (pid == 0)
         the data structures if necessary. */
 
         #ifdef SUPPORT_TLS
-        tls_close(FALSE, FALSE);
+        tls_close(TRUE, FALSE);
         #endif
 
         /* Reset SIGHUP and SIGCHLD in the child in both cases. */
diff --git a/src/src/exim.c b/src/src/exim.c
index a715c0b39..856e65571 100644
--- a/src/src/exim.c
+++ b/src/src/exim.c
@@ -526,7 +526,7 @@ close_unwanted(void)
 if (smtp_input)
   {
   #ifdef SUPPORT_TLS
-  tls_close(FALSE, FALSE);      /* Shut down the TLS library */
+  tls_close(TRUE, FALSE);      /* Shut down the TLS library */
   #endif
   (void)close(fileno(smtp_in));
   (void)close(fileno(smtp_out));