Propose backport to prevent crashes during SSL renegotiation with OptRenegotiate set, client certificates available from original handshake but client certs were originaly not verified and should get verified now.