Reported in ZD13631

`ssl->peerVerifyRet` wasn't being cleared when retrying with an alternative cert chain
2022-02-12 00:34:24 +01:00
parent 2fa542eb28
commit 445ed2f234
1 changed files with 3 additions and 0 deletions
--- a/src/internal.c
+++ b/src/internal.c
@ -12340,6 +12340,9 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
                            }

                            ret = 0; /* clear errors and continue */
+                    #if defined(OPENSSL_EXTRA) || defined(OPENSSL_EXTRA_X509_SMALL)
+                            ssl->peerVerifyRet = 0;
+                    #endif
                            args->verifyErr = 0;
                        }