• src/sbbs3/ssl_test.csrc/sbbs3/ssl.c

    From Deuc¿@VERT to Git commit to main/sbbs/master on Wed Nov 11 11:09:37 2026
    https://gitlab.synchro.net/main/sbbs/-/commit/1b538a73367011f7653b19e0
    Added Files:
    src/sbbs3/ssl_test.c
    Modified Files:
    src/sbbs3/ssl.c
    Log Message:
    ssl: balance certificate epoch locks and detect replacements

    Release cert_epoch_lock on both certificate-cache checkout paths, and start tracking an existing ssl.cert on the first sync. Restore each loaded certificate's epoch before every load attempt, including after self-signed certificate creation.

    Add standalone cryptlib regression tests for cache reuse, balanced locks, first-session self-signing, certificate replacement with an active session, and TLS clients without a local certificate.

    Fixes #1335

    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net