https://bugs.openldap.org/show_bug.cgi?id=10337
Howard Chu hyc@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|UNCONFIRMED |RESOLVED
--- Comment #1 from Howard Chu hyc@openldap.org --- The purpose of using the NEWCTX option is to create a completely new SSL_CTX, not to inherit anything from an existing one.
The TLS string options are explicitly not copied because they're already stored in the existing SSL_CTX. Copying them to a new SSL_CTX would defeat the purpose of creating a new SSL_CTX.