feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Merge pull request #3149 from SparkiDev/tls13_no_cli_cert_err

Browse Source 
TLS 1.3: Client with no certificate an error with define
This commit is contained in:
toddouska
2020-07-27 16:40:07 -07:00
committed by GitHub
parent 6b3b37604f 76a35f2a77
commit 5ef7ff6054
3 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/internal.c
View File

@ -18404,6 +18404,9 @@ const char* wolfSSL_ERR_reason_error_string(unsigned long e)
case DTLS_SIZE_ERROR: case DTLS_SIZE_ERROR:
return "DTLS trying to send too much in single datagram error"; return "DTLS trying to send too much in single datagram error";
case NO_CERT_ERROR:
return "TLS1.3 No Certificate Set Error";
default : default :
return "unknown error number"; return "unknown error number";
} }

6
src/tls13.c
View File

@ -3202,7 +3202,13 @@ static int DoTls13CertificateRequest(WOLFSSL* ssl, const byte* input,
ssl->options.sendVerify = SEND_CERT; ssl->options.sendVerify = SEND_CERT;
} }
else { else {
#ifndef WOLFSSL_NO_CLIENT_CERT_ERROR
ssl->options.sendVerify = SEND_BLANK_CERT; ssl->options.sendVerify = SEND_BLANK_CERT;
#else
WOLFSSL_MSG("Certificate required but none set on client");
SendAlert(ssl, alert_fatal, illegal_parameter);
return NO_CERT_ERROR;
#endif
} }
/* This message is always encrypted so add encryption padding. */ /* This message is always encrypted so add encryption padding. */

1
wolfssl/error-ssl.h
View File

@ -168,6 +168,7 @@ enum wolfSSL_ErrorCodes {
SSL_SHUTDOWN_ALREADY_DONE_E = -437, /* Shutdown called redundantly */ SSL_SHUTDOWN_ALREADY_DONE_E = -437, /* Shutdown called redundantly */
TLS13_SECRET_CB_E = -438, /* TLS1.3 secret Cb fcn failure */ TLS13_SECRET_CB_E = -438, /* TLS1.3 secret Cb fcn failure */
DTLS_SIZE_ERROR = -439, /* Trying to send too much data */ DTLS_SIZE_ERROR = -439, /* Trying to send too much data */
NO_CERT_ERROR = -440, /* TLS1.3 - no cert set error */
/* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */ /* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */