commit ca133a34c5a920da195071986159912c297653e4
author Jerry Yu <jerry.h.yu@arm.com> Tue Feb 15 14:22:05 2022 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Tue Feb 22 10:17:58 2022 +0800
tree a8b9bef7bd40aa61b220b4f3a47f780a3157ee17
parent 537530d57aa16b4c532f319acbd1e69e8594e252

Change state machine

Skip CertificateVerfiy if empty certificate or no
CertificateRequest received.

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index bc2cfeb..99ff600 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -9874,7 +9874,6 @@
             -c "got a certificate request" \
             -c "<= parse certificate request" \
             -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
-            -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
             -c "<= write empty client certificate"
 
 requires_openssl_tls1_3
@@ -9891,7 +9890,6 @@
             -c "got a certificate request" \
             -c "<= parse certificate request" \
             -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
-            -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
             -c "<= write empty client certificate"
 
 requires_openssl_tls1_3
@@ -9939,9 +9937,7 @@
             0 \
             -c "=> parse certificate request" \
             -c "got no certificate request" \
-            -c "<= parse certificate request" \
-            -C "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
-            -C "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY"
+            -c "<= parse certificate request"
 
 requires_gnutls_tls1_3
 requires_gnutls_next_no_ticket
@@ -9956,9 +9952,7 @@
             0 \
             -c "=> parse certificate request" \
             -c "got no certificate request" \
-            -c "<= parse certificate request" \
-            -C "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
-            -C "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY"
+            -c "<= parse certificate request"
 
 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
 requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE