commit ba1baf33f555c81e1f5d62bbddca7914eee87f61
author Kazuho Oku <kazuhooku@gmail.com> Thu Nov 24 12:49:41 2022 +0900
committer Kazuho Oku <kazuhooku@gmail.com> Thu Nov 24 12:49:45 2022 +0900
tree 88a7e062f3a11e6a397400b8c907777799893d68
parent c385e1f3791c6fbf759a0dc34c62ba18db36987e

add FIXME

lib/picotls.c

diff --git a/lib/picotls.c b/lib/picotls.c
index 52c3d49..8f4d1a9 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -3219,7 +3219,9 @@
         goto Exit;
 
     if (tls->client.certificate_request.context.base != NULL) {
-        /* If this is a resumed session, the server must not send the certificate request in the handshake */
+        /* The client must not send a certifiate if:
+         * - this is a resumed session, in which case the server is forbidden from sending the certificate request
+         * - ECH was offered by the client but the server rejected (FIXME) */
         if (tls->is_psk_handshake) {
             ret = PTLS_ALERT_ILLEGAL_PARAMETER;
             goto Exit;