mirror
/
go
mirror of https://github.com/golang/go.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

crypto/tls: populate peerCertificates before validation fails

This commit is contained in:
Laszlo Soos 2021-09-09 09:06:13 +00:00
parent c84f3a4004
commit 74b95be176
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/crypto/tls/handshake_server.go
View File

@ -810,6 +810,8 @@ func (c *Conn) processCertsFromClient(certificate Certificate) error {
return errors.New("tls: client didn't provide a certificate")
}
c.peerCertificates = certs
if c.config.ClientAuth >= VerifyClientCertIfGiven && len(certs) > 0 {
opts := x509.VerifyOptions{
Roots: c.config.ClientCAs,
@ -831,7 +833,6 @@ func (c *Conn) processCertsFromClient(certificate Certificate) error {
c.verifiedChains = chains
}
c.peerCertificates = certs
c.ocspResponse = certificate.OCSPStaple
c.scts = certificate.SignedCertificateTimestamps