Hi, I updated our advisory at http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2013_01.txt and the patch at http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.33_fix_ssl_sni.patch with the diff from revision 2925: http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2925/diff/
Setting id_context in the SNI callback doesn't seem to have any useful effect, which makes it really an absolutely useless thing. Sorry for the trouble. regards, Stefan -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org