From aca83b42d78d2e56469191609584cd2788953f4a Mon Sep 17 00:00:00 2001
From: Marco Oliverio <marco@wolfssl.com>
Date: Wed, 20 Jul 2022 17:38:32 +0200
Subject: [PATCH] fix: dtls13: send immediately post-handshake certificate
 request

---
 src/dtls13.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/dtls13.c b/src/dtls13.c
index e6e7fb412..7cb32fa64 100644
--- a/src/dtls13.c
+++ b/src/dtls13.c
@@ -432,7 +432,9 @@ static int Dtls13SendNow(WOLFSSL* ssl, enum HandShakeType handshakeType)
 
     if (handshakeType == client_hello || handshakeType == hello_retry_request ||
         handshakeType == finished || handshakeType == session_ticket ||
-        handshakeType == session_ticket || handshakeType == key_update)
+        handshakeType == session_ticket || handshakeType == key_update ||
+        (handshakeType == certificate_request &&
+            ssl->options.handShakeState == HANDSHAKE_DONE))
         return 1;
 
     return 0;