commit 2c9ee81f6eac61aa15a37fc3258ad841e19cceab
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Tue Jul 22 11:45:03 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Oct 21 16:30:13 2014 +0200
tree 11252e4b5fd18c36228788cd0ee11a7b3d0be762
parent a0e1632b7941430e4b9b507e2e8879c228286973

Start adding srv support for hello verify request

Dummy fixed content for now.

Also, seems to be a race condition in the way the socket is closed and
reopened, leading to a few "random" failures in compat.sh. A fix is planned
for later.

library/error.c

diff --git a/library/error.c b/library/error.c
index 73504d4..44ac31e 100644
--- a/library/error.c
+++ b/library/error.c
@@ -452,6 +452,8 @@
             snprintf( buf, buflen, "SSL - A counter would wrap (eg, too many messages exchanged)" );
         if( use_ret == -(POLARSSL_ERR_SSL_WAITING_SERVER_HELLO_RENEGO) )
             snprintf( buf, buflen, "SSL - Unexpected message at ServerHello in renegotiation" );
+        if( use_ret == -(POLARSSL_ERR_SSL_HELLO_VERIFY_REQUIRED) )
+            snprintf( buf, buflen, "SSL - DTLS client must retry for hello verification" );
 #endif /* POLARSSL_SSL_TLS_C */
 
 #if defined(POLARSSL_X509_USE_C) || defined(POLARSSL_X509_CREATE_C)