ssl: propagate transcript-hash computation failures

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>
This commit is contained in:
Ben Taylor 2026-05-14 11:27:05 +01:00
parent 98e4a7b02a
commit 9063aca165
2 changed files with 2 additions and 0 deletions

View File

@ -6297,6 +6297,7 @@ static int ssl_compute_master(mbedtls_ssl_handshake_params *handshake,
ret = handshake->calc_verify(ssl, session_hash, &seed_len);
if (ret != 0) {
MBEDTLS_SSL_DEBUG_RET(1, "calc_verify", ret);
return ret;
}
MBEDTLS_SSL_DEBUG_BUF(3, "session hash for extended master secret",

View File

@ -3077,6 +3077,7 @@ static int ssl_tls13_process_client_finished(mbedtls_ssl_context *ssl)
if (ret != 0) {
MBEDTLS_SSL_DEBUG_RET(
1, "mbedtls_ssl_tls13_compute_resumption_master_secret", ret);
return ret;
}
mbedtls_ssl_handshake_set_state(ssl, MBEDTLS_SSL_HANDSHAKE_WRAPUP);