Fixes for async CI

Author: dgarske

examples/async/async_client.c

@@ -252,8 +252,11 @@ int client_async_test(int argc, char** argv)
     AsyncTlsCryptoCbCtx cryptoCbCtx;
 #endif
 #ifdef WOLFSSL_STATIC_MEMORY
-    static byte memory[300000];
-    static byte memoryIO[34500];
+    /* Sized for a TLS 1.3 mutual-auth handshake with every supported
+     * operation class pending: suspended verifies during mutual auth raise
+     * the bucket high-water mark well above the synchronous footprint. */
+    static byte memory[800000];
+    static byte memoryIO[64000];
     #if !defined(WOLFSSL_STATIC_MEMORY_LEAN)
     WOLFSSL_MEM_CONN_STATS ssl_stats;
     #endif

examples/async/async_server.c

@@ -212,8 +212,11 @@ int server_async_test(int argc, char** argv)
     AsyncTlsCryptoCbCtx cryptoCbCtx;
 #endif
 #ifdef WOLFSSL_STATIC_MEMORY
-    static byte memory[300000];
-    static byte memoryIO[34500];
+    /* Sized for a TLS 1.3 mutual-auth handshake with every supported
+     * operation class pending: suspended verifies during mutual auth raise
+     * the bucket high-water mark well above the synchronous footprint. */
+    static byte memory[800000];
+    static byte memoryIO[64000];
     #if !defined(WOLFSSL_STATIC_MEMORY_LEAN)
     WOLFSSL_MEM_CONN_STATS ssl_stats;
     #endif

src/tls13.c

@@ -15674,11 +15674,15 @@ int DoTls13HandShakeMsg(WOLFSSL* ssl, byte* input, word32* inOutIdx,
                                       totalSz);
     #if defined(WOLFSSL_ASYNC_CRYPT) || defined(WOLFSSL_NONBLOCK_OCSP)
         if ((ret == WC_NO_ERR_TRACE(WC_PENDING_E) &&
-                 (ssl->kdfMsgStep == 0 || kdfStepEntry != 0)) ||
+                 (ssl->kdfMsgStep == 0 || kdfStepEntry != 0) &&
+                 ssl->options.processReply != 0 /* doProcessInit */) ||
                 ret == WC_NO_ERR_TRACE(OCSP_WANT_READ)) {
-            /* Re-present for in-handler pends and pre-dispatch drain pends;
-             * a post-handler key-schedule pend must NOT replay (state is
-             * committed; DoTls13MsgDerives() finishes it instead). */
+            /* Re-present for in-handler pends and pre-dispatch drain pends.
+             * Not for post-handler pends, which committed the message: a
+             * key-schedule pend (kdfMsgStep != 0) resumes through
+             * DoTls13MsgDerives(), and a post-handshake-auth send pend
+             * (processReply reset to doProcessInit) resumes through
+             * wolfSSL_negotiate(). */
             *inOutIdx = startIdx;
         }
     #endif
@@ -15710,10 +15714,11 @@ int DoTls13HandShakeMsg(WOLFSSL* ssl, byte* input, word32* inOutIdx,
                                 ssl->pendingMsgSz);
         #if defined(WOLFSSL_ASYNC_CRYPT) || defined(WOLFSSL_NONBLOCK_OCSP)
             if ((ret == WC_NO_ERR_TRACE(WC_PENDING_E) &&
-                 (ssl->kdfMsgStep == 0 || kdfStepEntry != 0)) ||
+                 (ssl->kdfMsgStep == 0 || kdfStepEntry != 0) &&
+                 ssl->options.processReply != 0 /* doProcessInit */) ||
                 ret == WC_NO_ERR_TRACE(OCSP_WANT_READ)) {
-                /* Re-present the fragment; a post-handler key-schedule
-                 * pend falls through and consumes the message. */
+                /* Re-present the fragment; a post-handler pend falls
+                 * through and consumes the message. */
                 ssl->pendingMsgOffset -= inputLength;
                 *inOutIdx -= inputLength;
             }