diff options
| author | Matt Caswell <matt@openssl.org> | 2016-11-22 16:39:27 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2017-01-23 14:04:44 +0000 |
| commit | 10305baf26f1a43348e855266ed1f21840ec3d7d (patch) | |
| tree | 2df533d2740e700ed42e02425029db01b97b06ec /ssl/statem/statem.c | |
| parent | a03a9dbe2a3ac45661568ad809c25ddd7c5e79b7 (diff) | |
Stop client from sending Certificate message when not requested
In a non client-auth renegotiation where the original handshake *was*
client auth, then the client will send a Certificate message anyway
resulting in a connection failure.
Fixes #1920
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1982)
Diffstat (limited to 'ssl/statem/statem.c')
| -rw-r--r-- | ssl/statem/statem.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ssl/statem/statem.c b/ssl/statem/statem.c index a1da2a4418..f39a529463 100644 --- a/ssl/statem/statem.c +++ b/ssl/statem/statem.c @@ -355,6 +355,7 @@ static int state_machine(SSL *s, int server) s->hit = 0; s->s3->tmp.cert_request = 0; + s->s3->tmp.cert_req = 0; if (SSL_IS_DTLS(s)) { st->use_timer = 1; |