Fix error when server does not send CertificateStatus message
authorMatt Caswell <matt@openssl.org>
Thu, 5 Nov 2015 14:52:27 +0000 (14:52 +0000)
committerMatt Caswell <matt@openssl.org>
Sun, 27 Dec 2015 22:02:33 +0000 (22:02 +0000)
commit905943af3b43116b64ae815db1a6b9c2f15e0356
tree4043d70e19a86a1d959db5b2fe46c068c3638546
parent155a1623d005297626008efb4f71714dd023de25
Fix error when server does not send CertificateStatus message

If a server sends the status_request extension then it may choose
to send the CertificateStatus message. However this is optional.
We were treating it as mandatory and the connection was failing.

Thanks to BoringSSL for reporting this issue.

RT#4120

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
ssl/s3_clnt.c
ssl/t1_lib.c