move handshake_send to after commitment message

which gives us the ability to check for SSL data written by
SSL_shutdown()

diff --git a/src/modules/rlm_eap/libeap/eap_tls.c b/src/modules/rlm_eap/libeap/eap_tls.c
index d182fef2428be7ad054ec180bd3f05496d3bfc9c..ffeba95131f4c679e59b6e27e65b1122036eec51 100644 (file)
--- a/src/modules/rlm_eap/libeap/eap_tls.c
+++ b/src/modules/rlm_eap/libeap/eap_tls.c
@@ -775,11 +775,12 @@ static fr_tls_status_t eaptls_operation(fr_tls_status_t status, eap_handler_t *h
                if (conf->tls13_send_zero) {
                        RDEBUG("TLS send Commitment Message");
                        tls_session->record_plus(&tls_session->clean_in, "\0", 1);
-                       tls_handshake_send(request, tls_session);
                } else {
                        RDEBUG("TLS sending close_notify");
                        SSL_shutdown(tls_session->ssl);
                }
+
+               tls_handshake_send(request, tls_session);
        }
 #endif