state: call secret_func on early write key change as well

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/lib/constate.c b/lib/constate.c
index ffa343000eedae1bd5d32ea4c2d9902c87bed17e..ca520480aeb3cfbad5b0b80905fea9d2c797144d 100644 (file)
--- a/lib/constate.c
+++ b/lib/constate.c
@@ -1150,6 +1150,11 @@ _gnutls_call_secret_func(gnutls_session_t session,
                                return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);
                        secret_read = session->key.proto.tls13.e_ckey;
                }
+               if (for_write) {
+                       if (unlikely(session->security_parameters.entity == GNUTLS_SERVER))
+                               return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);
+                       secret_write = session->key.proto.tls13.e_ckey;
+               }
                break;
        case STAGE_HS:
                prf = session->security_parameters.prf;