Move the place where call set_outbound_transform to switch handshake key
Signed-off-by: Xiaokang Qian <xiaokang.qian@arm.com>
diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index b154835..cd36ea8 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -2235,9 +2235,11 @@
MBEDTLS_SSL_PROC_CHK(
mbedtls_ssl_finish_handshake_msg(ssl, buf_len, 0));
- /* Switch outbound back to handshake key after end_of_early_data */
- mbedtls_ssl_set_outbound_transform(
- ssl, ssl->handshake->transform_handshake);
+ /* TODO: Currently switch outbound back to handshake key in the case of
+ * MBEDTLS_SSL_CLIENT_CERTIFICATE. If we refine the coordinate function
+ * of client certificate state machine, we have to move the switch
+ * outbound function.
+ */
mbedtls_ssl_handshake_set_state(ssl, MBEDTLS_SSL_CLIENT_CERTIFICATE);