Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Won't Fix
-
None
-
None
-
None
Description
When a TLS server sends a Client Certificate Request as part of the handshake and the client does not have a certificate available, the TLS specification mandates that the client shall attempt to continue the connection attempt sending a zero-length certificate.
We should write a unit test verifying libprocess handles this correctly when acting as a client, although it's not completely clear how this might be implemented.