From 10305baf26f1a43348e855266ed1f21840ec3d7d Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Tue, 22 Nov 2016 16:39:27 +0000 Subject: [PATCH] Stop client from sending Certificate message when not requested In a non client-auth renegotiation where the original handshake *was* client auth, then the client will send a Certificate message anyway resulting in a connection failure. Fixes #1920 Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/1982) --- ssl/statem/statem.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ssl/statem/statem.c b/ssl/statem/statem.c index a1da2a4418..f39a529463 100644 --- a/ssl/statem/statem.c +++ b/ssl/statem/statem.c @@ -355,6 +355,7 @@ static int state_machine(SSL *s, int server) s->hit = 0; s->s3->tmp.cert_request = 0; + s->s3->tmp.cert_req = 0; if (SSL_IS_DTLS(s)) { st->use_timer = 1; -- 2.25.1