Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RFC7250 - RawPublicKey - No Suitable Certificate? #186

Open
boaks opened this issue Jan 25, 2023 · 1 comment
Open

RFC7250 - RawPublicKey - No Suitable Certificate? #186

boaks opened this issue Jan 25, 2023 · 1 comment
Labels
enhancement New feature or request

Comments

@boaks
Copy link
Contributor

boaks commented Jan 25, 2023

I'm currently on testing the interoperability of the OpenSSL - RPK PR.

If the client has "no suitable certificate", the current implementation in "main" branch aborts the handshake.

dtls.c: check_server_hellodone

An alternative approach would be, to implement RFC 5246 - 7.4.6 - Client Certificate :

If no suitable certificate is available, the client MUST send a certificate message containing no certificates. That is, the certificate_list structure has a length of zero.

That enables an server to decide to continue or abort.

Any opinions?
@boaks boaks added the enhancement New feature or request label Jan 25, 2023
@mrdeep1
Copy link
Contributor

mrdeep1 commented Jan 26, 2023

Empty client certificate list back to the server works for me.

boaks added a commit to boaks/tinydtls that referenced this issue Aug 26, 2024
@boaks
dtls.c: support empty client certificate.
dd37ce3 
Use empty client certificate, if a certificate is requested but no
certificate is available.

Issue eclipse#186

Signed-off-by: Achim Kraus <achim.kraus@cloudcoap.net>
@boaks boaks mentioned this issue Aug 26, 2024
Merged
boaks added a commit to boaks/tinydtls that referenced this issue Aug 26, 2024
@boaks
dtls.c: support empty client certificate.
367d3d8 
Use empty client certificate, if a certificate is requested but no
certificate is available.

Issue eclipse#186

Signed-off-by: Achim Kraus <achim.kraus@cloudcoap.net>
boaks added a commit that referenced this issue Aug 28, 2024
@boaks
dtls.c: support empty client certificate.
11c5c53 
Use empty client certificate, if a certificate is requested but no
certificate is available.

Issue #186

Signed-off-by: Achim Kraus <achim.kraus@cloudcoap.net>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@boaks @mrdeep1