git: 9front

Info  •  Files  •  Log  •  Branches

libsec: only send client cert when we have one (fix regression from r6e976b2004dd)

--- a/sys/src/libsec/port/tlshand.c

+++ b/sys/src/libsec/port/tlshand.c

@@ -726,9 +726,11 @@

 	}

 	if(creq) {

-		m.u.certificate.ncert = 1;

-		m.u.certificate.certs = emalloc(m.u.certificate.ncert * sizeof(Bytes));

-		m.u.certificate.certs[0] = makebytes(cert, certlen);		

+		if(cert != nil && certlen > 0){

+			m.u.certificate.ncert = 1;

+			m.u.certificate.certs = emalloc(m.u.certificate.ncert * sizeof(Bytes));

+			m.u.certificate.certs[0] = makebytes(cert, certlen);

+		}		

 		m.tag = HCertificate;

 		if(!msgSend(c, &m, AFlush))

 			goto Err;

-- 

⑨