tree 62c7bb4982fb828118471142ee5ba118fd30d80e
parent 24bc5708144105d04acbedd56014a73afbc61500
author Hanno Becker <hanno.becker@arm.com> 1551116598 +0000
committer Hanno Becker <hanno.becker@arm.com> 1560952777 +0100

ssl_client2: Extract peer CRT info from verification callback

So far, `ssl_client2` printed the CRT info for the peer's CRT
by requesting the latter through `mbedtls_ssl_get_peer_cert()`
at the end of the handshake, and printing it via
`mbedtls_x509_crt_info()`. When `MBEDTLS_SSL_KEEP_PEER_CERTIFICATE`
is disabled, this does no longer work because the peer's CRT
isn't stored beyond the handshake.

This makes some tests in `ssl-opt.sh` fail which rely on the CRT
info output for the peer certificate.

This commit modifies `ssl_client2` to extract the peer CRT info
from the verification callback, which is always called at a time
when the peer's CRT is available. This way, the peer's CRT info
is still printed if `MBEDTLS_SSL_KEEP_PEER_CERTIFICATE` is disabled.