Commit a3f7ff2b authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't request certificates for any PSK ciphersuite 



Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent 69a3a9f5

ssl/s3_srvr.c

+1 −1
Original line number Diff line number Diff line
@@ -503,7 +503,7 @@ int ssl3_accept(SSL *s) 
                    * With normal PSK Certificates and Certificate Requests

                    * are omitted

                    */

                   || (s->s3->tmp.new_cipher->algorithm_mkey & SSL_kPSK)) {

                   || (s->s3->tmp.new_cipher->algorithm_mkey & SSL_PSK)) {

                /* no cert request */

                skip = 1;

                s->s3->tmp.cert_request = 0;