feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

intermediate cert check when using tls1.3 for client side

Browse Source
This commit is contained in:
Hideki Miyazaki
2024-10-23 16:41:01 +09:00
parent bdd62314f0
commit 79a9e0a709
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/internal.c
View File

@ -15232,7 +15232,13 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
else /* skips OCSP and force CRL check */ else /* skips OCSP and force CRL check */
#endif /* HAVE_CERTIFICATE_STATUS_REQUEST_V2 */ #endif /* HAVE_CERTIFICATE_STATUS_REQUEST_V2 */
#if defined(HAVE_CERTIFICATE_STATUS_REQUEST) #if defined(HAVE_CERTIFICATE_STATUS_REQUEST)
if (IsAtLeastTLSv1_3(ssl->version)) { if (IsAtLeastTLSv1_3(ssl->version) &&
ssl->options.side == WOLFSSL_CLIENT_END &&
ssl->status_request) {
/* We check CSR in Certificate message sent from
* Server. Server side will check client
* certificates by traditional OCSP if enabled
*/
ret = TLSX_CSR_InitRequest_ex(ssl->extensions, ret = TLSX_CSR_InitRequest_ex(ssl->extensions,
args->dCert, ssl->heap, args->certIdx); args->dCert, ssl->heap, args->certIdx);
} }