corrected bug which caused a fatal alert to be sent even if it

wasn't required

diff --git a/lib/gnutls_kx.c b/lib/gnutls_kx.c
index e4dea9f974e4427ce1b84ff77c56c2601ad88b41..732e232658d9f5ff5dabb8939e656de18bbe2429 100644 (file)
--- a/lib/gnutls_kx.c
+++ b/lib/gnutls_kx.c
@@ -502,7 +502,8 @@ int _gnutls_recv_client_certificate(SOCKET cd, GNUTLS_STATE state)
                                return 0;
                        }
                        /* certificate was required */
-                       gnutls_send_alert( cd, state, GNUTLS_FATAL, GNUTLS_BAD_CERTIFICATE);
+                       if (optional==MANDATORY_PACKET)
+                               gnutls_send_alert( cd, state, GNUTLS_FATAL, GNUTLS_BAD_CERTIFICATE);
                        gnutls_assert();
                        return ret;
                }