From a400eccf287c55558ae7197c831828cf10b0a35c Mon Sep 17 00:00:00 2001
From: Tony Finch <dot@dotat.at>
Date: Tue, 5 Nov 2013 12:18:02 +0000
Subject: [PATCH] Correctly close the server side of TLS when forking for
 delivery.

---
 src/src/daemon.c | 2 +-
 src/src/exim.c   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/src/daemon.c b/src/src/daemon.c
index 3467f14a7..8e61dcf87 100644
--- a/src/src/daemon.c
+++ b/src/src/daemon.c
@@ -639,7 +639,7 @@ if (pid == 0)
         the data structures if necessary. */
 
         #ifdef SUPPORT_TLS
-        tls_close(FALSE, FALSE);
+        tls_close(TRUE, FALSE);
         #endif
 
         /* Reset SIGHUP and SIGCHLD in the child in both cases. */
diff --git a/src/src/exim.c b/src/src/exim.c
index a715c0b39..856e65571 100644
--- a/src/src/exim.c
+++ b/src/src/exim.c
@@ -526,7 +526,7 @@ close_unwanted(void)
 if (smtp_input)
   {
   #ifdef SUPPORT_TLS
-  tls_close(FALSE, FALSE);      /* Shut down the TLS library */
+  tls_close(TRUE, FALSE);      /* Shut down the TLS library */
   #endif
   (void)close(fileno(smtp_in));
   (void)close(fileno(smtp_out));
-- 
2.30.2