Fix error when server does not send CertificateStatus message
authorMatt Caswell <matt@openssl.org>
Thu, 5 Nov 2015 14:52:27 +0000 (14:52 +0000)
committerMatt Caswell <matt@openssl.org>
Sun, 27 Dec 2015 22:05:36 +0000 (22:05 +0000)
commita7316aace3871b637b8099a2efe30af38f988ad4
treeab342690235793f46789f6e7e9aee84d2534b214
parent1967199f9f8ed3faf376ddbb077f41551541f08a
Fix error when server does not send CertificateStatus message

If a server sends the status_request extension then it may choose
to send the CertificateStatus message. However this is optional.
We were treating it as mandatory and the connection was failing.

Thanks to BoringSSL for reporting this issue.

RT#4120

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(cherry picked from commit 905943af3b43116b64ae815db1a6b9c2f15e0356)
ssl/s3_clnt.c
ssl/t1_lib.c