commit 5398c10b897de8f4f29aa897484621b76748bea4
author Jerry Yu <jerry.h.yu@arm.com> Fri Nov 05 13:32:38 2021 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Fri Nov 05 13:32:38 2021 +0800
tree 4cda285701105664721e72c28e58b1470b71177d
parent 834886d2112b54dca7781d2da1a239434bd43f2c

Add return value check for cerificate verify

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls13_generic.c

diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c
index 45692d8..75b11c9 100644
--- a/library/ssl_tls13_generic.c
+++ b/library/ssl_tls13_generic.c
@@ -503,6 +503,7 @@
 cleanup:
 
     MBEDTLS_SSL_DEBUG_MSG( 2, ( "<= parse certificate verify" ) );
+    MBEDTLS_SSL_DEBUG_RET( 1, "mbedtls_ssl_tls13_process_certificate_verify", ret );
     return( ret );
 #else
     ((void) ssl);

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index 037dfa5..0e78356 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -8833,7 +8833,9 @@
             -c "=> ssl_tls1_3_process_server_hello" \
             -c "<= parse encrypted extensions"      \
             -c "Certificate verification flags clear" \
-            -c "<= parse certificate verify"
+            -c "=> parse certificate verify"          \
+            -c "<= parse certificate verify"          \
+            -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0"
 
 requires_gnutls_tls1_3
 requires_gnutls_next_no_ticket
@@ -8864,7 +8866,9 @@
             -c "=> ssl_tls1_3_process_server_hello" \
             -c "<= parse encrypted extensions"      \
             -c "Certificate verification flags clear" \
-            -c "<= parse certificate verify"
+            -c "=> parse certificate verify"          \
+            -c "<= parse certificate verify"          \
+            -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0"
 
 # Test heap memory usage after handshake
 requires_config_enabled MBEDTLS_MEMORY_DEBUG