Index: ssl_engine_io.c
===================================================================
--- ssl_engine_io.c	(revision 1412612)
+++ ssl_engine_io.c	(working copy)
@@ -1231,6 +1231,11 @@
                           "\"SSLVerifyClient optional_no_ca\" "
                           "configuration");
             ssl_log_ssl_error(SSLLOG_MARK, APLOG_INFO, server);
+
+            /* on session resumption ssl_callback_SSLVerify() 
+             * will not be called, therefore we have to set it here
+             */
+            sslconn->verify_info = "GENEROUS";
         }
         else {
             const char *error = sslconn->verify_error ?