Fix error when server does not send CertificateStatus message
authorMatt Caswell <matt@openssl.org>
Thu, 5 Nov 2015 14:31:11 +0000 (14:31 +0000)
committerMatt Caswell <matt@openssl.org>
Sun, 27 Dec 2015 21:59:04 +0000 (21:59 +0000)
commitbb1aaab42880489729aeafea27d3569cce60c20b
treeb531ea6f76cc0425be7109a455c2cf5a4918cb8c
parentef96e4a28fa98cdf44246baab9ec8cdb69914fd9
Fix error when server does not send CertificateStatus message

If a server sends the status_request extension then it may choose
to send the CertificateStatus message. However this is optional.
We were treating it as mandatory and the connection was failing.

Thanks to BoringSSL for reporting this issue.

RT#4120

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
ssl/statem/statem_clnt.c
ssl/t1_lib.c