summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorjsing <jsing@openbsd.org>2020-05-16 14:42:35 +0000
committerjsing <jsing@openbsd.org>2020-05-16 14:42:35 +0000
commit3290fa225a472d5fe4404192e92d39c2026e1e49 (patch)
tree45bc584136b24c0c3c457833f2a25ac8d08ec1bc
parentDo not redraw or update mode if nothing has changed. (diff)
downloadwireguard-openbsd-3290fa225a472d5fe4404192e92d39c2026e1e49.tar.xz
wireguard-openbsd-3290fa225a472d5fe4404192e92d39c2026e1e49.zip
Add TLS13_ERR_NO_CERTIFICATE.
This was missed in previous tls13_server.c commit. ok inoguchi@ tb@
-rw-r--r--lib/libssl/tls13_internal.h5
-rw-r--r--lib/libssl/tls13_legacy.c5
2 files changed, 7 insertions, 3 deletions
diff --git a/lib/libssl/tls13_internal.h b/lib/libssl/tls13_internal.h
index 5ea09db8a0d..98cbf4c8a7a 100644
--- a/lib/libssl/tls13_internal.h
+++ b/lib/libssl/tls13_internal.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls13_internal.h,v 1.79 2020/05/11 18:08:11 jsing Exp $ */
+/* $OpenBSD: tls13_internal.h,v 1.80 2020/05/16 14:42:35 jsing Exp $ */
/*
* Copyright (c) 2018 Bob Beck <beck@openbsd.org>
* Copyright (c) 2018 Theo Buehler <tb@openbsd.org>
@@ -45,7 +45,8 @@ __BEGIN_HIDDEN_DECLS
#define TLS13_ERR_HRR_FAILED 17
#define TLS13_ERR_TRAILING_DATA 18
#define TLS13_ERR_NO_SHARED_CIPHER 19
-#define TLS13_ERR_NO_PEER_CERTIFICATE 20
+#define TLS13_ERR_NO_CERTIFICATE 20
+#define TLS13_ERR_NO_PEER_CERTIFICATE 21
#define TLS13_ALERT_LEVEL_WARNING 1
#define TLS13_ALERT_LEVEL_FATAL 2
diff --git a/lib/libssl/tls13_legacy.c b/lib/libssl/tls13_legacy.c
index af1ad2169df..be89e9aa247 100644
--- a/lib/libssl/tls13_legacy.c
+++ b/lib/libssl/tls13_legacy.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls13_legacy.c,v 1.6 2020/05/11 17:46:46 jsing Exp $ */
+/* $OpenBSD: tls13_legacy.c,v 1.7 2020/05/16 14:42:35 jsing Exp $ */
/*
* Copyright (c) 2018, 2019 Joel Sing <jsing@openbsd.org>
*
@@ -119,6 +119,9 @@ tls13_legacy_error(SSL *ssl)
case TLS13_ERR_NO_SHARED_CIPHER:
reason = SSL_R_NO_SHARED_CIPHER;
break;
+ case TLS13_ERR_NO_CERTIFICATE:
+ reason = SSL_R_MISSING_RSA_CERTIFICATE; /* XXX */
+ break;
case TLS13_ERR_NO_PEER_CERTIFICATE:
reason = SSL_R_PEER_DID_NOT_RETURN_A_CERTIFICATE;
break;