diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c index 078daea352..7cb8bbd8c1 100644 --- a/library/ssl_tls13_generic.c +++ b/library/ssl_tls13_generic.c @@ -302,11 +302,12 @@ static int ssl_tls13_parse_certificate_verify(mbedtls_ssl_context *ssl, MBEDTLS_SSL_DEBUG_BUF(3, "verify hash", verify_hash, verify_hash_len); - if ((ret = mbedtls_pk_verify_ext((mbedtls_pk_sigalg_t) sig_alg, - &ssl->session_negotiate->peer_cert->pk, - md_alg, verify_hash, verify_hash_len, - p, signature_len)) == 0) { - return 0; + ret = mbedtls_pk_verify_ext((mbedtls_pk_sigalg_t) sig_alg, + &ssl->session_negotiate->peer_cert->pk, + md_alg, verify_hash, verify_hash_len, + p, signature_len); + if (ret == 0) { + return ret; } MBEDTLS_SSL_DEBUG_RET(1, "mbedtls_pk_verify_ext", ret);