Update more detail for the issue, to make the original issue clearer.

Background

In 1.3 spec:

Table 14 — Flag fields definitions for the Responder
If CERT_INSTALL_RESET_CAP set, Responder may return an ERROR message of ErrorCode=ResetRequired to complete a certificate provisioning request. If this bit is set, SET_CERT_CAP shall be set and CSR_CAP can be set.
Table 58 — Error code and error data
ResetRequired: The device requires a reset to complete the requested operation. This ErrorCode can be sent in response to the GET_DIGESTS, GET_CERTIFICATE, GET_CSR or SET_CERTIFICATE message.

Problem Statement

Problem A:

In responder, when CERT_INSTALL_RESET_CAP is supported, need_reset will be true.

in 1.3 Spec CERT_INSTALL_RESET_CAP indicate the certificate provisioning request can return ResetRequired, not mentioning set key pair request.

There is chance to generate error response with ResetRequired for SET_KEY_PAIR_INFO request.

in 1.3 Spec, SET_KEY_PAIR_INFO was not listed in Table 58 — Error code and error data, ResetRequired row.

Checking SPDM spec 1.3.2, SET_KEY_PAIR_INFO should not return ErrorCode=ResetRequired

Problem B:

In line 118-119, in requester, the ResetRequired was handled only when last request was SET_CERTIFICATE and GET_CSR.

So even if responder returns ResetRequired for SET_KEY_PAIR_INFO, the requester will ignore the ResetRequired error.