commit f19989da313724e54a624c22846f18bb90cb4cba
author Ronald Cron <ronald.cron@arm.com> Thu Feb 22 12:05:42 2024 +0100
committer Ronald Cron <ronald.cron@arm.com> Thu Feb 22 12:22:53 2024 +0100
tree e77bccf0c48134696751dfd129db3055de6e85bd
parent 8f1de7e029abba12d1ef7007dc603be0246bb2c0

tls13: Improve sanity check in get_early_data_status

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index 5fbcf45..df0519a 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -2321,7 +2321,7 @@
 
 int mbedtls_ssl_get_early_data_status(mbedtls_ssl_context *ssl)
 {
-    if ((ssl->conf->endpoint == MBEDTLS_SSL_IS_SERVER) ||
+    if ((ssl->conf->endpoint != MBEDTLS_SSL_IS_CLIENT) ||
         (!mbedtls_ssl_is_handshake_over(ssl))) {
         return MBEDTLS_ERR_SSL_BAD_INPUT_DATA;
     }