if (s->hit) s->ctx->sess_hit++;
if (s->hit) s->ctx->stats.sess_hit++;
int ssl2_connect(s)SSL *s;	{	unsigned long l=time(NULL);	BUF_MEM *buf=NULL;	int ret= -1;	void (*cb)()=NULL;	int new_state,state;	RAND_seed(&l,sizeof(l));	ERR_clear_error();	clear_sys_error();	if (s->info_callback != NULL)		cb=s->info_callback;	else if (s->ctx->info_callback != NULL)		cb=s->ctx->info_callback;	/* init things to blank */	if (!SSL_in_init(s) || SSL_in_before(s)) SSL_clear(s);	s->in_handshake++;	for (;;)		{		state=s->state;		switch (s->state)			{		case SSL_ST_BEFORE:		case SSL_ST_CONNECT:		case SSL_ST_BEFORE|SSL_ST_CONNECT:		case SSL_ST_OK|SSL_ST_CONNECT:			if (cb != NULL) cb(s,SSL_CB_HANDSHAKE_START,1);			s->version=SSL2_VERSION;			s->type=SSL_ST_CONNECT;			buf=s->init_buf;			if ((buf == NULL) && ((buf=BUF_MEM_new()) == NULL))				{				ret= -1;				goto end;				}			if (!BUF_MEM_grow(buf,				SSL2_MAX_RECORD_LENGTH_3_BYTE_HEADER))				{				ret= -1;				goto end;				}			s->init_buf=buf;			s->init_num=0;			s->state=SSL2_ST_SEND_CLIENT_HELLO_A;			s->ctx->sess_connect++;			s->handshake_func=ssl2_connect;			BREAK;		case SSL2_ST_SEND_CLIENT_HELLO_A:		case SSL2_ST_SEND_CLIENT_HELLO_B:			s->shutdown=0;			ret=client_hello(s);			if (ret <= 0) goto end;			s->init_num=0;			s->state=SSL2_ST_GET_SERVER_HELLO_A;			BREAK;				case SSL2_ST_GET_SERVER_HELLO_A:		case SSL2_ST_GET_SERVER_HELLO_B:			ret=get_server_hello(s);			if (ret <= 0) goto end;			s->init_num=0;			if (!s->hit) /* new session */				{				s->state=SSL2_ST_SEND_CLIENT_MASTER_KEY_A;				BREAK; 				}			else				{				s->state=SSL2_ST_CLIENT_START_ENCRYPTION;				break;				}			case SSL2_ST_SEND_CLIENT_MASTER_KEY_A:		case SSL2_ST_SEND_CLIENT_MASTER_KEY_B:			ret=client_master_key(s);			if (ret <= 0) goto end;			s->init_num=0;			s->state=SSL2_ST_CLIENT_START_ENCRYPTION;			break;		case SSL2_ST_CLIENT_START_ENCRYPTION:			/* Ok, we now have all the stuff needed to			 * start encrypting, so lets fire it up :-) */			if (!ssl2_enc_init(s,1))				{				ret= -1;				goto end;				}			s->s2->clear_text=0;			s->state=SSL2_ST_SEND_CLIENT_FINISHED_A;			break;		case SSL2_ST_SEND_CLIENT_FINISHED_A:		case SSL2_ST_SEND_CLIENT_FINISHED_B:			ret=client_finished(s);			if (ret <= 0) goto end;			s->init_num=0;			s->state=SSL2_ST_GET_SERVER_VERIFY_A;			break;		case SSL2_ST_GET_SERVER_VERIFY_A:		case SSL2_ST_GET_SERVER_VERIFY_B:			ret=get_server_verify(s);			if (ret <= 0) goto end;			s->init_num=0;			s->state=SSL2_ST_GET_SERVER_FINISHED_A;			break;		case SSL2_ST_GET_SERVER_FINISHED_A:		case SSL2_ST_GET_SERVER_FINISHED_B:			ret=get_server_finished(s);			if (ret <= 0) goto end;			break;		case SSL2_ST_SEND_CLIENT_CERTIFICATE_A:		case SSL2_ST_SEND_CLIENT_CERTIFICATE_B:		case SSL2_ST_SEND_CLIENT_CERTIFICATE_C:		case SSL2_ST_SEND_CLIENT_CERTIFICATE_D:		case SSL2_ST_X509_GET_CLIENT_CERTIFICATE:			ret=client_certificate(s);			if (ret <= 0) goto end;			s->init_num=0;			s->state=SSL2_ST_GET_SERVER_FINISHED_A;			break;		case SSL_ST_OK:			BUF_MEM_free(s->init_buf);			s->init_buf=NULL;			s->init_num=0;		/*	ERR_clear_error();*/			/* If we want to cache session-ids in the client			 * and we sucessfully add the session-id to the			 * cache, and there is a callback, then pass it out.			 * 26/11/96 - eay - only add if not a re-used session.			 */			ssl_update_cache(s,SSL_SESS_CACHE_CLIENT);			if (s->hit) s->ctx->sess_hit++;			ret=1;			/* s->server=0; */			s->ctx->sess_connect_good++;			if (cb != NULL) cb(s,SSL_CB_HANDSHAKE_DONE,1);			goto end;			/* break; */		default:			SSLerr(SSL_F_SSL2_CONNECT,SSL_R_UNKNOWN_STATE);			return(-1);			/* break; */			}		if ((cb != NULL) && (s->state != state))			{			new_state=s->state;			s->state=state;			cb(s,SSL_CB_CONNECT_LOOP,1);			s->state=new_state;			}		}end:	s->in_handshake--;	if (cb != NULL) 		cb(s,SSL_CB_CONNECT_EXIT,ret);	return(ret);	}