On 16/01/18 16:22, Huy Cong Vu wrote: > Ok the call for SSL_clear() apparently works. Thanks a lot. > To make the code clean, I will re-instantiate SSL object for each connection. I do not have any specific reasons to keep SSL object alive after each connection. It just that I do not want to re-inialize the context. In the old version, it works very well without it.... Interesting. There has been no change in the API in this regards. You have never been "allowed" to reuse an SSL object without first calling SSL_clear() - that's the whole point of that function (and its been around since forever). It sounds like you were "lucky" before :-) Matt -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users