forked from wolfSSL/wolfssl
send blank cert on client if TLS instead of TLSv1.2, more accept this now and some even incorrectly require it
This commit is contained in:
@ -7257,7 +7257,7 @@ static void PickHashSigAlgo(CYASSL* ssl,
|
|||||||
cert and private key */
|
cert and private key */
|
||||||
if (ssl->buffers.certificate.buffer && ssl->buffers.key.buffer)
|
if (ssl->buffers.certificate.buffer && ssl->buffers.key.buffer)
|
||||||
ssl->options.sendVerify = SEND_CERT;
|
ssl->options.sendVerify = SEND_CERT;
|
||||||
else if (IsAtLeastTLSv1_2(ssl))
|
else if (IsTLS(ssl))
|
||||||
ssl->options.sendVerify = SEND_BLANK_CERT;
|
ssl->options.sendVerify = SEND_BLANK_CERT;
|
||||||
|
|
||||||
return 0;
|
return 0;
|
||||||
|
Reference in New Issue
Block a user