tree 89593bf818b6b370619c429ee0ea689c1a00fbfb
parent f41bb59703b5fed45209a608daac1d523072e4de
author David Benjamin <davidben@google.com> 1457642662 -0500
committer David Benjamin <davidben@google.com> 1457723399 +0000

Add tests for doing client auth with no certificates.

In TLS, you never skip the Certificate message. It may be empty, but its
presence is determined by CertificateRequest. (This is sensible.)

In SSL 3.0, the client omits the Certificate message. This means you need to
probe and may receive either Certificate or ClientKeyExchange (thankfully,
ClientKeyExchange is not optional, or we'd have to probe at ChangeCipherSpec).

We didn't have test coverage for this, despite some of this logic being a
little subtle asynchronously. Fix this.

Change-Id: I149490ae5506f02fa0136cb41f8fea381637bf45
Reviewed-on: https://boringssl-review.googlesource.com/7419
Reviewed-by: Steven Valdez <svaldez@google.com>
Reviewed-by: David Benjamin <davidben@google.com>