diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2003-03-24 17:21:54 +0000 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2003-03-24 17:21:54 +0000 |
| commit | f5669ae6e791277e24019dac60b1f3d83c704d5e (patch) | |
| tree | f61caed5d91bccfefcf74698addee100fd09853a /lib/auth_cert.c | |
| parent | 1b962233d3299078f5cc125d76005cf991c0b642 (diff) | |
| download | gnutls-f5669ae6e791277e24019dac60b1f3d83c704d5e.tar.gz | |
* Corrected behaviour when a certificate request message is received.
Now a certificate packet is always sent, and in SSL 3.0 cipher suites
a no_certificate alert is sent instead.
Diffstat (limited to 'lib/auth_cert.c')
| -rw-r--r-- | lib/auth_cert.c | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/lib/auth_cert.c b/lib/auth_cert.c index 23138c98ef..7fb8799933 100644 --- a/lib/auth_cert.c +++ b/lib/auth_cert.c @@ -429,7 +429,8 @@ int _gnutls_gen_x509_crt(gnutls_session session, opaque ** data) gnutls_privkey *apr_pkey; int apr_cert_list_length; - /* find the appropriate certificate */ + /* find the appropriate certificate + */ if ((ret = _gnutls_find_apr_cert(session, &apr_cert_list, &apr_cert_list_length, @@ -1043,8 +1044,10 @@ int _gnutls_proc_cert_cert_req(gnutls_session session, opaque * data, */ session->internals.selected_cert_index = ind; - if (ind >= 0) - session->key->certificate_requested = 1; + /* We should reply with a certificate message, + * even if we have no certificate to send. + */ + session->key->certificate_requested = 1; return 0; } |