Honor the status from peer and do not do internal OCSP lookup regardless

Item 2) Suggestion from Sean implemented: "Limit the message types"

Item 3) Removed a hard tab
This commit is contained in:
kaleb-himes
2019-07-08 13:50:05 -06:00
parent 964dac96a7
commit 3e6246af59

View File

@ -10360,10 +10360,14 @@ int TLSX_Parse(WOLFSSL* ssl, byte* input, word16 length, byte msgType,
case TLSX_STATUS_REQUEST: case TLSX_STATUS_REQUEST:
WOLFSSL_MSG("Certificate Status Request extension received"); WOLFSSL_MSG("Certificate Status Request extension received");
#ifdef WOLFSSL_TLS13 #ifdef WOLFSSL_TLS13
if (IsAtLeastTLSv1_3(ssl->version)) if (IsAtLeastTLSv1_3(ssl->version) &&
break; msgType != client_hello &&
#endif msgType != certificate_request &&
msgType != certificate) {
break;
}
#endif
ret = CSR_PARSE(ssl, input + offset, size, isRequest); ret = CSR_PARSE(ssl, input + offset, size, isRequest);
break; break;