tls-peer: Simply ignore certificate request context

This SHALL be zero length for server authentication anyway.

diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c
index 4cba0bb..fa81ee7 100644 (file)
--- a/src/libtls/tls_peer.c
+++ b/src/libtls/tls_peer.c
@@ -409,11 +409,6 @@ static status_t process_certificate(private_tls_peer_t *this,
                        this->alert->add(this->alert, TLS_FATAL, TLS_DECODE_ERROR);
                        return NEED_MORE;
                }
-               if (data.len > 0)
-               {
-                       DBG1(DBG_TLS, "certificate request context available,"
-                                "but CertificateRequest not received");
-               }
        }
        if (!reader->read_data24(reader, &data))
        {