commit 744577a429d3815169a590f5ca7d7b0118c99e9f
author Yanray Wang <yanray.wang@arm.com> Fri Dec 01 22:33:59 2023 +0800
committer Yanray Wang <yanray.wang@arm.com> Fri Dec 01 23:03:37 2023 +0800
tree 14f74e59e4fb4702e2b041e9d15886fc9d4a8bd2
parent 9ae6534c201473aafb511fa8ec2b29817a88d00f

tls13: early_data: cli: check a PSK has been selected in EE

Signed-off-by: Yanray Wang <yanray.wang@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index 4273f38..1e1223e 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -2187,12 +2187,14 @@
          * check here that the additional constraints on the handshake
          * parameters, when early data are exchanged, are met,
          * namely:
+         * - a PSK has been selected for the handshake
          * - the selected PSK for the handshake was the first one proposed
          *   by the client.
          * - the selected ciphersuite for the handshake is the ciphersuite
          *   associated with the selected PSK.
          */
-        if (handshake->selected_identity != 0 ||
+        if ((!mbedtls_ssl_tls13_key_exchange_mode_with_psk(ssl)) ||
+            handshake->selected_identity != 0 ||
             handshake->ciphersuite_info->id !=
             ssl->session_negotiate->ciphersuite) {