GoAhead Embedded Web Server TLS Flaws Allow Revoked Client Certificates and Session Decryption

GoAhead embedded web server fails to enforce certificate revocation in mutual-TLS setups. Revoked certificates still pass authentication; session decryption possible.