generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

axtls_connect: allow connect without peer verification

Browse Source 
The SSL_SERVER_VERIFY_LATER bit in the ssl_ctx_new() call allows the
code to verify the peer certificate explicitly after the handshake and
then the "data->set.ssl.verifypeer" option works.
This commit is contained in:
Daniel Stenberg 2010-12-15 11:11:20 +01:00
parent 9035709e25
commit c75a9fef59
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/axtls.c
View File

@ -156,7 +156,7 @@ Curl_axtls_connect(struct connectdata *conn,
const char *x509;
/* Assuming users will not compile in custom key/cert to axTLS */
uint32_t client_option = SSL_NO_DEFAULT_KEY;
uint32_t client_option = SSL_NO_DEFAULT_KEY|SSL_SERVER_VERIFY_LATER;
if(conn->ssl[sockindex].state == ssl_connection_complete)
/* to make us tolerant against being called more than once for the