commit dee6ffa961b6bdee43b5c3e767e3cd27fc7d30dc
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Fri Aug 16 09:53:41 2024 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Tue Aug 20 22:03:10 2024 +0200
tree cd380a942cf6be7c04d78a16e7ff7fa39f6faa6f
parent e910ac862788c57fe4aff0e8fcccd27a1bd5369c

Add support for context f_vrfy callback in 1.3

This was only supported in 1.2 for no good reason.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index c9cca70..a7c6cac 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -7953,6 +7953,7 @@
         return 0;
     }
 
+    /* Verify callback: precedence order is SSL context, else conf struct. */
     int (*f_vrfy)(void *, mbedtls_x509_crt *, int, uint32_t *);
     void *p_vrfy;
     if (ssl->f_vrfy != NULL) {