forked from wolfSSL/wolfssl
Honor the status from peer and do not do internal OCSP lookup regardless
Item 2) Suggestion from Sean implemented: "Limit the message types" Item 3) Removed a hard tab
This commit is contained in:
12
src/tls.c
12
src/tls.c
@ -10360,10 +10360,14 @@ int TLSX_Parse(WOLFSSL* ssl, byte* input, word16 length, byte msgType,
|
|||||||
case TLSX_STATUS_REQUEST:
|
case TLSX_STATUS_REQUEST:
|
||||||
WOLFSSL_MSG("Certificate Status Request extension received");
|
WOLFSSL_MSG("Certificate Status Request extension received");
|
||||||
|
|
||||||
#ifdef WOLFSSL_TLS13
|
#ifdef WOLFSSL_TLS13
|
||||||
if (IsAtLeastTLSv1_3(ssl->version))
|
if (IsAtLeastTLSv1_3(ssl->version) &&
|
||||||
break;
|
msgType != client_hello &&
|
||||||
#endif
|
msgType != certificate_request &&
|
||||||
|
msgType != certificate) {
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
#endif
|
||||||
ret = CSR_PARSE(ssl, input + offset, size, isRequest);
|
ret = CSR_PARSE(ssl, input + offset, size, isRequest);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user