TLS: Ignore client cert when tls-auth-clients off. (#7457)

(cherry picked from commit 5266293a0f)
This commit is contained in:
Yossi Gottlieb 2020-07-10 10:32:21 +03:00 committed by Oran Agra
parent 2d3687655b
commit 6f1e828454

View File

@ -337,9 +337,7 @@ connection *connCreateAcceptedTLS(int fd, int require_auth) {
conn->c.state = CONN_STATE_ACCEPTING;
if (!require_auth) {
/* We still verify certificates if provided, but don't require them.
*/
SSL_set_verify(conn->ssl, SSL_VERIFY_PEER, NULL);
SSL_set_verify(conn->ssl, SSL_VERIFY_NONE, NULL);
}
SSL_set_fd(conn->ssl, conn->c.fd);