diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2017-03-06 14:31:30 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2017-03-06 14:37:02 +0100 |
| commit | 804e7efa1d62493624f4fb08784d2d78c456997d (patch) | |
| tree | c40b583e8b935d8e93cb699956bc4f35488bc081 | |
| parent | daf7691b7a9dec7f13b1ad8a04647f9604c7d003 (diff) | |
| download | gnutls-tlsfuzzer-with-certs.tar.gz | |
gnutls-serv: don't send alert on cert verify callbacktlsfuzzer-with-certs
Wait instead of the handshake to return error, and send
normally the alert. This will reflect what most applications would
do.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
| -rw-r--r-- | src/serv.c | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/src/serv.c b/src/serv.c index 04c5ac912f..14951ba8fe 100644 --- a/src/serv.c +++ b/src/serv.c @@ -274,11 +274,6 @@ int ret; if (require_cert || ENABLED_OPT(VERIFY_CLIENT_CERT)) { if (cert_verify(session, NULL, NULL) == 0) { - do { - ret = gnutls_alert_send(session, GNUTLS_AL_FATAL, GNUTLS_A_ACCESS_DENIED); - } while(ret == GNUTLS_E_INTERRUPTED || ret == GNUTLS_E_AGAIN); - - j->http_state = HTTP_STATE_CLOSING; return -1; } } else { |