Permalink
Browse files

sbuf: in varify-ca/full checking should not be optional

  • Loading branch information...
markokr committed Feb 3, 2016
1 parent 56128c6 commit 6eccac1dd28bc0dfc85561dd9b15de40889abfda
Showing with 3 additions and 1 deletion.
  1. +3 −1 src/sbuf.c
@@ -927,8 +927,10 @@ static void setup_tls(struct tls_config *conf, const char *pfx, int sslmode,
} else {
/* TLS server, check client? */
if (sslmode == SSLMODE_VERIFY_FULL) {
tls_config_verify_client_optional(conf);
tls_config_verify_client(conf);
} else if (sslmode == SSLMODE_VERIFY_CA) {
tls_config_verify_client(conf);
} else {
tls_config_verify_client_optional(conf);
}
}

0 comments on commit 6eccac1

Please sign in to comment.