On Wed, Sep 23, 2009 at 10:19 AM, Ambroz Bizjak <ambr...@gmail.com> wrote:
>
> When a signal happens, I attempt to clean up everything. I PR_Close
> client SSL file descriptors, and go global cleanup with
> SECKEY_DestroyPrivateKey, CERT_DestroyCertificate, NSS_Shutdown and
> PR_Cleanup.

This sounds good.  Try adding a SSL_ShutdownServerSessionIDCache()
call before the NSS_Shutdown() call, as our test SSL server selfserv.c does:

http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/security/nss/cmd/selfserv/selfserv.c&rev=1.89&mark=2279,2281#2278

Basically you need to destroy every key, cert, slot, etc. before you call
NSS_Shutdown.

Wan-teh
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to