Always reinitialize the SSL cipher suites in InitSSL_Side as the side and enabled algos have likely changed.

kareem-wolfssl · kareem-wolfssl · commit 89931bd8849a · 2026-01-19T17:50:26.000-07:00
diff --git a/src/internal.c b/src/internal.c
@@ -2253,6 +2253,9 @@ int InitSSL_Side(WOLFSSL* ssl, word16 side)
     }
 #endif /* WOLFSSL_DTLS && !NO_WOLFSSL_SERVER */
 
+    /* Forcefully reinitialize suites here as the side may have changed. */
+    FreeSuites(ssl);
+    AllocateSuites(ssl);
     return InitSSL_Suites(ssl);
 }
 #endif /* OPENSSL_EXTRA || WOLFSSL_EITHER_SIDE ||

Original file line number	Diff line number	Diff line change
`@@ -2253,6 +2253,9 @@ int InitSSL_Side(WOLFSSL* ssl, word16 side)`
`2253`	`2253`	`}`
`2254`	`2254`	`#endif /* WOLFSSL_DTLS && !NO_WOLFSSL_SERVER */`
`2255`	`2255`
	`2256`	`+ /* Forcefully reinitialize suites here as the side may have changed. */`
	`2257`	`+ FreeSuites(ssl);`
	`2258`	`+ AllocateSuites(ssl);`
`2256`	`2259`	`return InitSSL_Suites(ssl);`
`2257`	`2260`	`}`
`2258`	`2261`	`#endif /* OPENSSL_EXTRA \|\| WOLFSSL_EITHER_SIDE \|\|`