[Dovecot] [PATCH] Use SSL_MODE_RELEASE_BUFFERS if available to keep memory usage low

13 Oct 2011

# HG changeset patch
# User Cristian Rodríguez <crrodriguez@opensuse.org>
# Date 1318533592 10800
# Node ID c15d6befe20082009cb40926afa208ab4b684818
# Parent  962df5d9413a4a0fcc68aacc1df0dca7a44a0240
Use SSL_MODE_RELEASE_BUFFERS if available to keep memory usage low.

diff -r 962df5d9413a -r c15d6befe200 src/login-common/ssl-proxy-openssl.c

--- a/src/login-common/ssl-proxy-openssl.c	Wed Oct 12 17:16:10 2011 +0300
+++ b/src/login-common/ssl-proxy-openssl.c	Thu Oct 13 16:19:52 2011 -0300
@@ -925,6 +925,9 @@
 	STACK_OF(X509_NAME) *xnames = NULL;
 
 	SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL | SSL_OP_NO_SSLv2);
+#ifdef SSL_MODE_RELEASE_BUFFERS
+    SSL_CTX_set_mode(ssl_ctx, SSL_MODE_RELEASE_BUFFERS);
+#endif
 	if (*set->ssl_ca != '\0') {
 		/* set trusted CA certs */
 		store = SSL_CTX_get_cert_store(ssl_ctx);

    