Commit 6f1e8284 authored by Yossi Gottlieb's avatar Yossi Gottlieb Committed by Oran Agra
Browse files

TLS: Ignore client cert when tls-auth-clients off. (#7457)


(cherry picked from commit 5266293a)
parent 2d368765
...@@ -337,9 +337,7 @@ connection *connCreateAcceptedTLS(int fd, int require_auth) { ...@@ -337,9 +337,7 @@ connection *connCreateAcceptedTLS(int fd, int require_auth) {
conn->c.state = CONN_STATE_ACCEPTING; conn->c.state = CONN_STATE_ACCEPTING;
if (!require_auth) { if (!require_auth) {
/* We still verify certificates if provided, but don't require them. SSL_set_verify(conn->ssl, SSL_VERIFY_NONE, NULL);
*/
SSL_set_verify(conn->ssl, SSL_VERIFY_PEER, NULL);
} }
SSL_set_fd(conn->ssl, conn->c.fd); SSL_set_fd(conn->ssl, conn->c.fd);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment