commit e1e344213a241bfab90af7bec151d48100b3c475
author Xiaofei Bai <xiaofei.bai@arm.com> Thu Dec 23 12:09:05 2021 +0000
committer Xiaofei Bai <xiaofei.bai@arm.com> Wed Jan 26 09:31:52 2022 +0000
tree eab0e5e8aaf53d2687487740c33b5273f05cba62
parent f51b79c2977c4dfb1264d390e6d3634c2f1e2a5e

Add TLS1.3 process certificate request

Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index d046495..83ee98f 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -1415,10 +1415,9 @@
     if( ( ssl->in_msgtype == MBEDTLS_SSL_MSG_HANDSHAKE ) &&
         ( ssl->in_msg[0] == MBEDTLS_SSL_HS_CERTIFICATE_REQUEST ) )
     {
-        MBEDTLS_SSL_DEBUG_MSG( 1, ( "CertificateRequest not supported" ) );
-        MBEDTLS_SSL_PEND_FATAL_ALERT( MBEDTLS_SSL_ALERT_MSG_HANDSHAKE_FAILURE,
-                                      MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE );
-        return( MBEDTLS_ERR_SSL_HANDSHAKE_FAILURE );
+        ret = mbedtls_ssl_tls13_process_certificate_request( ssl );
+        if( ret != 0 )
+            return( ret );
     }
 
     ssl->keep_current_message = 1;