commit 13c327d5003dc6f4e15c175379d4f1d718f7dbf2
author Hanno Becker <hanno.becker@arm.com> Thu Feb 07 13:17:53 2019 +0000
committer Hanno Becker <hanno.becker@arm.com> Tue Feb 26 14:38:09 2019 +0000
tree 966195c48cd37385b669eef87d2d8e45918848ef
parent 6d1986e6f5184bfb5669528cb7a0abb3493fa80a

Adapt ssl_clear_peer_cert() to removal of `peer_cert` field

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index b3e50a6..f012fb6 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -5775,14 +5775,14 @@
 
 static void ssl_clear_peer_cert( mbedtls_ssl_session *session )
 {
+#if defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE)
     if( session->peer_cert != NULL )
     {
         mbedtls_x509_crt_free( session->peer_cert );
         mbedtls_free( session->peer_cert );
         session->peer_cert = NULL;
     }
-
-#if !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE)
+#else
     if( session->peer_cert_digest != NULL )
     {
         /* Zeroization is not necessary. */
@@ -5791,7 +5791,7 @@
         session->peer_cert_digest_type = MBEDTLS_MD_NONE;
         session->peer_cert_digest_len  = 0;
     }
-#endif /* MBEDTLS_SSL_KEEP_PEER_CERTIFICATE */
+#endif /* !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE */
 }
 
 /*