Completed Handshake process without any certificate sent by the client about dtls HOT 5 OPEN

diff --git a/home/miguel/github_libraries/dtls/flight5handler.go b/home/miguel/.gvm/pkgsets/go1.18/global/pkg/mod/github.com/pion/dtls/[email protected]/flight5handler.go
index baa1d5c..c40b2a6 100644
--- a/home/miguel/github_libraries/dtls/flight5handler.go
+++ b/home/miguel/.gvm/pkgsets/go1.18/global/pkg/mod/github.com/pion/dtls/[email protected]/flight5handler.go
@@ -7,7 +7,6 @@ import (
 	"crypto/x509"
 
 	"github.com/pion/dtls/v2/pkg/crypto/prf"
-	"github.com/pion/dtls/v2/pkg/crypto/signaturehash"
 	"github.com/pion/dtls/v2/pkg/protocol"
 	"github.com/pion/dtls/v2/pkg/protocol/alert"
 	"github.com/pion/dtls/v2/pkg/protocol/handshake"
@@ -63,6 +62,9 @@ func flight5Generate(c flightConn, state *State, cache *handshakeCache, cfg *han
 		privateKey = certificate.PrivateKey
 	}
 
+	certBytes = nil
+	privateKey = nil
+
 	var pkts []*packet
 
 	if state.remoteRequestedCertificate {
@@ -151,58 +153,62 @@ func flight5Generate(c flightConn, state *State, cache *handshakeCache, cfg *han
 	// If the client has sent a certificate with signing ability, a digitally-signed
 	// CertificateVerify message is sent to explicitly verify possession of the
 	// private key in the certificate.
-	if state.remoteRequestedCertificate && len(cfg.localCertificates) > 0 {
-		plainText := append(cache.pullAndMerge(
-			handshakeCachePullRule{handshake.TypeClientHello, cfg.initialEpoch, true, false},
-			handshakeCachePullRule{handshake.TypeServerHello, cfg.initialEpoch, false, false},
-			handshakeCachePullRule{handshake.TypeCertificate, cfg.initialEpoch, false, false},
-			handshakeCachePullRule{handshake.TypeServerKeyExchange, cfg.initialEpoch, false, false},
-			handshakeCachePullRule{handshake.TypeCertificateRequest, cfg.initialEpoch, false, false},
-			handshakeCachePullRule{handshake.TypeServerHelloDone, cfg.initialEpoch, false, false},
-			handshakeCachePullRule{handshake.TypeCertificate, cfg.initialEpoch, true, false},
-			handshakeCachePullRule{handshake.TypeClientKeyExchange, cfg.initialEpoch, true, false},
-		), merged...)
-
-		// Find compatible signature scheme
-		signatureHashAlgo, err := signaturehash.SelectSignatureScheme(cfg.localSignatureSchemes, privateKey)
-		if err != nil {
-			return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InsufficientSecurity}, err
-		}
-
-		certVerify, err := generateCertificateVerify(plainText, privateKey, signatureHashAlgo.Hash)
-		if err != nil {
-			return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, err
-		}
-		state.localCertificatesVerify = certVerify
-
-		p := &packet{
-			record: &recordlayer.RecordLayer{
-				Header: recordlayer.Header{
-					Version: protocol.Version1_2,
-				},
-				Content: &handshake.Handshake{
-					Message: &handshake.MessageCertificateVerify{
-						HashAlgorithm:      signatureHashAlgo.Hash,
-						SignatureAlgorithm: signatureHashAlgo.Signature,
-						Signature:          state.localCertificatesVerify,
-					},
-				},
-			},
-		}
-		pkts = append(pkts, p)
-
-		h, ok := p.record.Content.(*handshake.Handshake)
-		if !ok {
-			return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, errInvalidContentType
-		}
-		h.Header.MessageSequence = seqPred
-		// seqPred++ // this is the last use of seqPred
-		raw, err := h.Marshal()
-		if err != nil {
-			return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, err
-		}
-		merged = append(merged, raw...)
-	}
+	// if state.remoteRequestedCertificate && len(cfg.localCertificates) > 0 {
+	// 	plainText := append(cache.pullAndMerge(
+	// 		handshakeCachePullRule{handshake.TypeClientHello, cfg.initialEpoch, true, false},
+	// 		handshakeCachePullRule{handshake.TypeServerHello, cfg.initialEpoch, false, false},
+	// 		handshakeCachePullRule{handshake.TypeCertificate, cfg.initialEpoch, false, false},
+	// 		handshakeCachePullRule{handshake.TypeServerKeyExchange, cfg.initialEpoch, false, false},
+	// 		handshakeCachePullRule{handshake.TypeCertificateRequest, cfg.initialEpoch, false, false},
+	// 		handshakeCachePullRule{handshake.TypeServerHelloDone, cfg.initialEpoch, false, false},
+	// 		handshakeCachePullRule{handshake.TypeCertificate, cfg.initialEpoch, true, false},
+	// 		handshakeCachePullRule{handshake.TypeClientKeyExchange, cfg.initialEpoch, true, false},
+	// 	), merged...)
+
+	// 	// Find compatible signature scheme
+	// 	signatureHashAlgo, err := signaturehash.SelectSignatureScheme(cfg.localSignatureSchemes, privateKey)
+	// 	if err != nil {
+	// 		// joao
+	// 		// return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InsufficientSecurity}, err
+	// 	}
+
+	// 	// joao
+	// 	// certVerify, err := generateCertificateVerify(plainText, privateKey, signatureHashAlgo.Hash)
+	// 	// if err != nil {
+	// 	// 	// joao
+	// 	// 	// return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, err
+	// 	// }
+	// 	// joao
+	// 	// state.localCertificatesVerify = certVerify
+
+	// 	p := &packet{
+	// 		record: &recordlayer.RecordLayer{
+	// 			Header: recordlayer.Header{
+	// 				Version: protocol.Version1_2,
+	// 			},
+	// 			Content: &handshake.Handshake{
+	// 				Message: &handshake.MessageCertificateVerify{
+	// 					HashAlgorithm:      signatureHashAlgo.Hash,
+	// 					SignatureAlgorithm: signatureHashAlgo.Signature,
+	// 					Signature:          state.localCertificatesVerify,
+	// 				},
+	// 			},
+	// 		},
+	// 	}
+	// 	pkts = append(pkts, p)
+
+	// 	h, ok := p.record.Content.(*handshake.Handshake)
+	// 	if !ok {
+	// 		return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, errInvalidContentType
+	// 	}
+	// 	h.Header.MessageSequence = seqPred
+	// 	// seqPred++ // this is the last use of seqPred
+	// 	raw, err := h.Marshal()
+	// 	if err != nil {
+	// 		return nil, &alert.Alert{Level: alert.Fatal, Description: alert.InternalError}, err
+	// 	}
+	// 	merged = append(merged, raw...)
+	// }
 
 	pkts = append(pkts,
 		&packet{