commit 7a94aca81af23741534a90649b3d4a1eb9b34c61
author Ronald Cron <ronald.cron@arm.com> Wed Mar 09 07:44:27 2022 +0100
committer Ronald Cron <ronald.cron@arm.com> Thu Mar 10 13:58:04 2022 +0100
tree 99920cb606c0fb4dc5df2b508c8cadb37b279e56
parent 5bb8fc830a69c213bc366201d4aa9192d998b4eb

Move state change from CLIENT_CERTIFICATE to its main handler

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index dbaa70c..6516523 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -1923,19 +1923,36 @@
  */
 static int ssl_tls13_write_client_certificate( mbedtls_ssl_context *ssl )
 {
+    int non_empty_certificate_msg = 0;
+
     MBEDTLS_SSL_DEBUG_MSG( 1,
                   ( "Switch to handshake traffic keys for outbound traffic" ) );
     mbedtls_ssl_set_outbound_transform( ssl, ssl->handshake->transform_handshake );
 
 #if defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED)
     if( ssl->handshake->client_auth )
-        return( mbedtls_ssl_tls13_write_certificate( ssl ) );
+    {
+        int ret = mbedtls_ssl_tls13_write_certificate( ssl );
+        if( ret != 0 )
+            return( ret );
 
-    mbedtls_ssl_handshake_set_state( ssl, MBEDTLS_SSL_CLIENT_FINISHED );
-
-    MBEDTLS_SSL_DEBUG_MSG( 2, ( "No certificate message to send." ) );
+        if( mbedtls_ssl_own_cert( ssl ) != NULL )
+            non_empty_certificate_msg = 1;
+    }
+    else
+    {
+        MBEDTLS_SSL_DEBUG_MSG( 2, ( "No certificate message to send." ) );
+    }
 #endif
 
+   if( non_empty_certificate_msg )
+   {
+        mbedtls_ssl_handshake_set_state( ssl,
+                                         MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY );
+   }
+   else
+        mbedtls_ssl_handshake_set_state( ssl, MBEDTLS_SSL_CLIENT_FINISHED );
+
     return( 0 );
 }