[Dovecot] [PATCH] Use SSL_MODE_RELEASE_BUFFERS if available to keep memory usage low
Cristian Rodríguez
crrodriguez at opensuse.org
Thu Oct 13 22:23:31 EEST 2011
# HG changeset patch
# User Cristian Rodríguez <crrodriguez at opensuse.org>
# Date 1318533592 10800
# Node ID c15d6befe20082009cb40926afa208ab4b684818
# Parent 962df5d9413a4a0fcc68aacc1df0dca7a44a0240
Use SSL_MODE_RELEASE_BUFFERS if available to keep memory usage low.
diff -r 962df5d9413a -r c15d6befe200 src/login-common/ssl-proxy-openssl.c
--- a/src/login-common/ssl-proxy-openssl.c Wed Oct 12 17:16:10 2011 +0300
+++ b/src/login-common/ssl-proxy-openssl.c Thu Oct 13 16:19:52 2011 -0300
@@ -925,6 +925,9 @@
STACK_OF(X509_NAME) *xnames = NULL;
SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2);
+#ifdef SSL_MODE_RELEASE_BUFFERS
+ SSL_CTX_set_mode(ssl_ctx, SSL_MODE_RELEASE_BUFFERS);
+#endif
if (*set->ssl_ca != '\0') {
/* set trusted CA certs */
store = SSL_CTX_get_cert_store(ssl_ctx);
More information about the dovecot
mailing list