Skip to content

Commit f2f9d5b

Browse files
committed
src/internal.c: in SanityCheckMsgReceived(), gate "TLS 1.2 message order check: certificate before CKE" from 5b6f86b on !WOLFSSL_NO_CLIENT_AUTH.
1 parent 64bdcce commit f2f9d5b

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

src/internal.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18083,12 +18083,14 @@ static int SanityCheckMsgReceived(WOLFSSL* ssl, byte type)
1808318083
WOLFSSL_ERROR_VERBOSE(OUT_OF_ORDER_E);
1808418084
return OUT_OF_ORDER_E;
1808518085
}
18086+
#ifndef WOLFSSL_NO_CLIENT_AUTH
1808618087
if (!ssl->options.resuming && ssl->options.verifyPeer &&
1808718088
!ssl->options.usingPSK_cipher &&
1808818089
!ssl->options.usingAnon_cipher &&
1808918090
!ssl->msgsReceived.got_certificate) {
1809018091
return OUT_OF_ORDER_E;
1809118092
}
18093+
#endif
1809218094
if (ssl->msgsReceived.got_certificate_verify||
1809318095
ssl->msgsReceived.got_change_cipher ||
1809418096
ssl->msgsReceived.got_finished) {

0 commit comments

Comments
 (0)