commit 6b916b1616f7994c8f7dfea2bb3754917b3964ef
author XiaokangQian <xiaokang.qian@arm.com> Mon Apr 25 07:29:34 2022 +0000
committer XiaokangQian <xiaokang.qian@arm.com> Thu May 26 00:40:53 2022 +0000
tree 370dc01000c4ab727c92a7a43f5fd08afeb1ff7d
parent a636d1f192270e48c3a6b88d9e1d830402b0e708

Add client certificate parse and certificate verify

Change-Id: I638db78922a03db6f8bd70c6c5f56fb60365547d
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>

library/ssl_tls13_server.c

diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c
index 8c8eb2a..1288e49 100644
--- a/library/ssl_tls13_server.c
+++ b/library/ssl_tls13_server.c
@@ -1613,6 +1613,24 @@
             ret = ssl_tls13_handshake_wrapup( ssl );
             break;
 
+        case MBEDTLS_SSL_CLIENT_CERTIFICATE:
+            ret = mbedtls_ssl_tls13_process_certificate( ssl );
+            if( ret == 0 )
+            {
+                mbedtls_ssl_handshake_set_state(
+                    ssl, MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY );
+            }
+            break;
+
+        case MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY:
+            ret = mbedtls_ssl_tls13_process_certificate_verify( ssl );
+            if( ret == 0 )
+            {
+                mbedtls_ssl_handshake_set_state(
+                    ssl, MBEDTLS_SSL_CLIENT_FINISHED );
+            }
+            break;
+
         default:
             MBEDTLS_SSL_DEBUG_MSG( 1, ( "invalid state %d", ssl->state ) );
             return( MBEDTLS_ERR_SSL_FEATURE_UNAVAILABLE );