Stop client from sending Certificate message when not requested
authorMatt Caswell <matt@openssl.org>
Tue, 22 Nov 2016 16:39:27 +0000 (16:39 +0000)
committerMatt Caswell <matt@openssl.org>
Mon, 23 Jan 2017 14:04:44 +0000 (14:04 +0000)
commit10305baf26f1a43348e855266ed1f21840ec3d7d
tree2df533d2740e700ed42e02425029db01b97b06ec
parenta03a9dbe2a3ac45661568ad809c25ddd7c5e79b7
Stop client from sending Certificate message when not requested

In a non client-auth renegotiation where the original handshake *was*
client auth, then the client will send a Certificate message anyway
resulting in a connection failure.

Fixes #1920

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1982)
ssl/statem/statem.c