HOPM doesn't respect 'tls_hostname_verification' setting

[TehPeGaSuS]

On my IRCd (UnrealIRCd), I've tried to connect HOPM via localhost + ssl.

HOPM refuses to connect with the error below, even with tls_hostname_verification = no;.

[2021-02-01T22:49:10+0000] CONFIG -> Loading /home/unrealircd/hopm/etc/hopm.conf
[2021-02-01T22:49:10+0000] IRC -> Attempting to connect to 127.0.0.4[127.0.0.4]:6697
[2021-02-01T22:49:10+0000] IRC -> connect(): error performing TLS handshake with 127.0.0.4: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
[2021-02-01T22:49:10+0000] IRC -> Connection to (127.0.0.4) failed, reconnecting.
[2021-02-01T22:56:24+0000] MAIN -> HOPM TRUNK started.

Bug or some configuration setting that I'm overlooking?

[Adam-]

tls_hostname_verification verifies that the served certificate matches the hostname you are connecting to. Regardless of that setting it will check the validity of the remote cert though (eg. issued by a trusted CA), which is what this error is.

[TehPeGaSuS]

Would it be possible to add an option probably named tls_certificate_verify, so that HOPM can ignore the certificate validity?

I know this is a very specific usecase but I believe that it would be helpful for others.

Cheers

[miwob]

Yes, this is already planned.