a1batross
/
kore
forked from mirrors/kore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

remove SSL_get_verify_result() check. 

If peer verification is turned on this becomes part of the handshake
process anyway and SSL_accept() will fail when appropriate.
This commit is contained in:
Joris Vink 2019-01-21 10:36:50 +01:00
parent 3f083d6126
commit 39467847fb
1 changed files with 0 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/connection.c
View File

@ -305,18 +305,6 @@ kore_connection_handle(struct connection *c)
c->cert = NULL;
}
r = SSL_get_verify_result(c->ssl);
switch (r) {
case X509_V_OK:
case X509_V_ERR_CRL_NOT_YET_VALID:
case X509_V_ERR_CRL_HAS_EXPIRED:
break;
default:
kore_debug("SSL_get_verify_result(): %d, %s",
r, ssl_errno_s);
return (KORE_RESULT_ERROR);
}
if (c->owner != NULL) {
listener = (struct listener *)c->owner;
if (listener->connect != NULL) {