commit 54719122698ca2cc8d1753d422520161d1776521
author Gabor Mezei <gabor.mezei@arm.com> Tue Jun 28 11:34:56 2022 +0200
committer Gabor Mezei <gabor.mezei@arm.com> Tue Jun 28 11:56:26 2022 +0200
tree 9e4d6fd42e544172ebd401b5372ac58a7b918b39
parent 05ebf3be74692b2c101a0ff34ed407c6ad36acc3

Move switching to handshake transform after sending CCS record

Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>

library/ssl_tls13_server.c

diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c
index d50be5d..29d4ffd 100644
--- a/library/ssl_tls13_server.c
+++ b/library/ssl_tls13_server.c
@@ -1239,11 +1239,6 @@
         return( ret );
     }
 
-    mbedtls_ssl_set_outbound_transform( ssl,
-                                        ssl->handshake->transform_handshake );
-    MBEDTLS_SSL_DEBUG_MSG(
-        3, ( "switching to handshake transform for outbound data" ) );
-
     return( ret );
 }
 
@@ -1407,6 +1402,11 @@
     unsigned char *buf;
     size_t buf_len, msg_len;
 
+    mbedtls_ssl_set_outbound_transform( ssl,
+                                        ssl->handshake->transform_handshake );
+    MBEDTLS_SSL_DEBUG_MSG(
+        3, ( "switching to handshake transform for outbound data" ) );
+
     MBEDTLS_SSL_DEBUG_MSG( 2, ( "=> write encrypted extensions" ) );
 
     MBEDTLS_SSL_PROC_CHK( mbedtls_ssl_start_handshake_msg( ssl,