WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity

TLS 1.3: Client with no certificate an error with define 

WOLFSSL_NO_CLIENT_CERT_ERROR
pull/3149/head
Sean Parkinson 2020-07-20 09:12:43 +10:00
parent 7883156f49
commit 76a35f2a77
3 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/internal.c
View File

@ -18404,6 +18404,9 @@ const char* wolfSSL_ERR_reason_error_string(unsigned long e)
case DTLS_SIZE_ERROR: case DTLS_SIZE_ERROR:
return "DTLS trying to send too much in single datagram error"; return "DTLS trying to send too much in single datagram error";
case NO_CERT_ERROR:
return "TLS1.3 No Certificate Set Error";
default : default :
return "unknown error number"; return "unknown error number";
} }

6
src/tls13.c
View File

@ -3202,7 +3202,13 @@ static int DoTls13CertificateRequest(WOLFSSL* ssl, const byte* input,
ssl->options.sendVerify = SEND_CERT; ssl->options.sendVerify = SEND_CERT;
} }
else { else {
#ifndef WOLFSSL_NO_CLIENT_CERT_ERROR
ssl->options.sendVerify = SEND_BLANK_CERT; ssl->options.sendVerify = SEND_BLANK_CERT;
#else
WOLFSSL_MSG("Certificate required but none set on client");
SendAlert(ssl, alert_fatal, illegal_parameter);
return NO_CERT_ERROR;
#endif
} }
/* This message is always encrypted so add encryption padding. */ /* This message is always encrypted so add encryption padding. */

1
wolfssl/error-ssl.h
View File

@ -168,6 +168,7 @@ enum wolfSSL_ErrorCodes {
SSL_SHUTDOWN_ALREADY_DONE_E = -437, /* Shutdown called redundantly */ SSL_SHUTDOWN_ALREADY_DONE_E = -437, /* Shutdown called redundantly */
TLS13_SECRET_CB_E = -438, /* TLS1.3 secret Cb fcn failure */ TLS13_SECRET_CB_E = -438, /* TLS1.3 secret Cb fcn failure */
DTLS_SIZE_ERROR = -439, /* Trying to send too much data */ DTLS_SIZE_ERROR = -439, /* Trying to send too much data */
NO_CERT_ERROR = -440, /* TLS1.3 - no cert set error */
/* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */ /* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */