Actually update the keys when a KeyUpdate message is sent or received

[thirdparty/openssl.git] / ssl / statem / statem_clnt.c

diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index 909b2f095391f1f78534a37dcabc46f27bcea20c..88d76085673d8912a83c3eaed14a24563dfc0227 100644 (file)
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -735,6 +735,9 @@ WORK_STATE ossl_statem_client_post_work(SSL *s, WORK_STATE wst)
     case TLS_ST_CW_KEY_UPDATE:
         if (statem_flush(s) != 1)
             return WORK_MORE_A;
+
+        if (!tls13_update_key(s, 1))
+            return WORK_ERROR;
         break;
     }