commit e220cdab7f16aeb0ffd7d04036e497c4e56f8124
author Kazuho Oku <kazuhooku@gmail.com> Thu Oct 19 15:27:26 2023 +0900
committer Kazuho Oku <kazuhooku@gmail.com> Thu Oct 19 15:27:26 2023 +0900
tree a604840ff9315b9922db4eb0d4b85211a55a6055
parent 651a06032465441143708d1795bc31e09c56f516

external PSK mode is orthogonal to X.509 client auth

lib/picotls.c

diff --git a/lib/picotls.c b/lib/picotls.c
index a9f454d..985f69a 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -4598,7 +4598,7 @@
 
     /* If the server was setup to use an external PSK but failed to agree, abort the handshake. Because external PSK is a form of
      * mutual authentication, we should abort continue the handshake upon negotiation failure, at least by default. */
-    if (tls->ctx->pre_shared_key.identity.base != NULL && tls->ctx->require_client_authentication && psk_index == SIZE_MAX) {
+    if (tls->ctx->pre_shared_key.identity.base != NULL && psk_index == SIZE_MAX) {
         ret = PTLS_ALERT_UNKNOWN_PSK_IDENTITY;
         goto Exit;
     }