commit 8bf74f37dca6af98c3aa7e7a050fcec4fc8a9510
author Hanno Becker <hanno.becker@arm.com> Wed Mar 27 11:01:30 2019 +0000
committer Hanno Becker <hanno.becker@arm.com> Thu Mar 28 16:13:38 2019 +0000
tree 7f022a9f5f39833d3114205ad4643705f6bc91d1
parent 902451db8bcac27b75b4ee200f62d77677ef9c0f

Add SSL configuration API for trusted CA callbacks

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index c969089..b8e10d6 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -2818,6 +2818,11 @@
 
     if( ssl->conf->cert_req_ca_list ==  MBEDTLS_SSL_CERT_REQ_CA_LIST_ENABLED )
     {
+        /* NOTE: If trusted certificates are provisioned
+         *       via a CA callback (configured through
+         *       `mbedtls_ssl_conf_ca_cb()`, then the
+         *       CertificateRequest is currently left empty. */
+
 #if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION)
         if( ssl->handshake->sni_ca_chain != NULL )
             crt = ssl->handshake->sni_ca_chain;