diff options
author | Ingela Anderton Andin <[email protected]> | 2018-04-26 16:58:28 +0200 |
---|---|---|
committer | Ingela Anderton Andin <[email protected]> | 2018-04-27 10:45:51 +0200 |
commit | c44477a5f174343673b429a17b518fb0697a0d22 (patch) | |
tree | f710b389553b6dd0337f9f538b02d7b0d512d9cb /lib/ssl/src/ssl_handshake.erl | |
parent | f2c1d537dc28ffbde5d42aedec70bf4c6574c3ea (diff) | |
download | otp-c44477a5f174343673b429a17b518fb0697a0d22.tar.gz otp-c44477a5f174343673b429a17b518fb0697a0d22.tar.bz2 otp-c44477a5f174343673b429a17b518fb0697a0d22.zip |
ssl: Proper handling of clients that choose to send an empty
answer to a certificate request
Solves ERL-599
Diffstat (limited to 'lib/ssl/src/ssl_handshake.erl')
-rw-r--r-- | lib/ssl/src/ssl_handshake.erl | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/lib/ssl/src/ssl_handshake.erl b/lib/ssl/src/ssl_handshake.erl index 7efb89bfae..8b1ea52ac9 100644 --- a/lib/ssl/src/ssl_handshake.erl +++ b/lib/ssl/src/ssl_handshake.erl @@ -1066,12 +1066,6 @@ select_hashsign(_, Cert, _, _, Version) -> %% %% Description: Handles signature algorithms selection for certificate requests (client) %%-------------------------------------------------------------------- -select_hashsign(#certificate_request{}, undefined, _, {Major, Minor}) when Major >= 3 andalso Minor >= 3-> - %% There client does not have a certificate and will send an empty reply, the server may fail - %% or accept the connection by its own preference. No signature algorihms needed as there is - %% no certificate to verify. - {undefined, undefined}; - select_hashsign(#certificate_request{hashsign_algorithms = #hash_sign_algos{hash_sign_algos = HashSigns}, certificate_types = Types}, Cert, SupportedHashSigns, {Major, Minor}) when Major >= 3 andalso Minor >= 3-> |