TLS: Ignore client cert when tls-auth-clients off. (#7457)

This commit is contained in:
Yossi Gottlieb 2020-07-10 10:32:21 +03:00 committed by GitHub
parent 6a014af79a
commit 5266293a0f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -337,9 +337,7 @@ connection *connCreateAcceptedTLS(int fd, int require_auth) {
conn->c.state = CONN_STATE_ACCEPTING;
if (!require_auth) {
/* We still verify certificates if provided, but don't require them.
*/
SSL_set_verify(conn->ssl, SSL_VERIFY_PEER, NULL);
SSL_set_verify(conn->ssl, SSL_VERIFY_NONE, NULL);
}
SSL_set_fd(conn->ssl, conn->c.fd);