denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Request a TLS client certificate even if no peer identity is given

Browse Source 
This allows a peer to perform client authentication if it wants, but skip
it if not.
This commit is contained in:
Martin Willi
2013-02-28 16:46:08 +01:00
parent 257c80cb5b
commit 807f2facd0
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_server.c
+1 -5
View File
@@ -984,11 +984,7 @@ METHOD(tls_handshake_t, build, status_t,
} }
/* otherwise fall through to next state */ /* otherwise fall through to next state */
case STATE_KEY_EXCHANGE_SENT: case STATE_KEY_EXCHANGE_SENT:
if (this->peer) return send_certificate_request(this, type, writer);
{
return send_certificate_request(this, type, writer);
}
/* otherwise fall through to next state */
case STATE_CERTREQ_SENT: case STATE_CERTREQ_SENT:
return send_hello_done(this, type, writer); return send_hello_done(this, type, writer);
case STATE_CIPHERSPEC_CHANGED_OUT: case STATE_CIPHERSPEC_CHANGED_OUT: