ctz / rustls / 988

96%

master: 96%

push

travis-ci

Fix client detection of bad CertificateRequests

A certificate request with no signature schemes is meaningless.
In TLS1.3 we reject this outright, but it was allowed in TLS1.2.
Fix that first.

Secondly, fix the TLS1.2 behaviour when `choose_scheme` fails:
we want to avoid any client auth in this case, not send a certificate
but be unable to send the matching CertificateVerify.

11 of 11 new or added lines in 3 files covered. (100.0%)

8060 of 8385 relevant lines covered (96.12%)

363601.87 hits per line