commit 0557c94fef2cf725afaf50c17adcad6eeb8e5fcb
author XiaokangQian <xiaokang.qian@arm.com> Mon May 30 08:10:53 2022 +0000
committer XiaokangQian <xiaokang.qian@arm.com> Mon May 30 08:10:53 2022 +0000
tree b52a9969509d6a18d284c5ceedec0adc8709a029
parent f2a942073e9c3d0a8e2cff78527d3fc33890a355

Add back SNI related code to validate_certificate

Change-Id: I75883858016d4163cd7c64c3418eb3ca24fa46ea
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>

library/ssl_tls13_generic.c

diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c
index 239be53..17efa8c 100644
--- a/library/ssl_tls13_generic.c
+++ b/library/ssl_tls13_generic.c
@@ -560,7 +560,14 @@
      * from the configuration. */
 #if defined(MBEDTLS_SSL_SRV_C)
     if( ssl->conf->endpoint == MBEDTLS_SSL_IS_SERVER )
-        authmode = ssl->conf->authmode;
+    {
+#if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
+        if( ssl->handshake->sni_authmode != MBEDTLS_SSL_VERIFY_UNSET )
+            authmode = ssl->handshake->sni_authmode;
+        else
+#endif
+            authmode = ssl->conf->authmode;
+    }
 #endif
 
     /*