From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 25 Aug 2020 15:21:02 +0000 (+0200)
Subject: tls-peer: Simply ignore certificate request context
X-Git-Tag: 5.9.2rc1~23^2~81
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=44cda40d58c585ee4444eee10d32f0d11f9fcd1c;p=thirdparty%2Fstrongswan.git

tls-peer: Simply ignore certificate request context

This SHALL be zero length for server authentication anyway.
---

diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c
index 4cba0bba41..fa81ee7e9a 100644
--- a/src/libtls/tls_peer.c
+++ b/src/libtls/tls_peer.c
@@ -409,11 +409,6 @@ static status_t process_certificate(private_tls_peer_t *this,
 			this->alert->add(this->alert, TLS_FATAL, TLS_DECODE_ERROR);
 			return NEED_MORE;
 		}
-		if (data.len > 0)
-		{
-			DBG1(DBG_TLS, "certificate request context available,"
-				 "but CertificateRequest not received");
-		}
 	}
 	if (!reader->read_data24(reader, &data))
 	{