summaryrefslogtreecommitdiff
path: root/src/network.c
diff options
context:
space:
mode:
authorStefan Bühler <stbuehler@web.de>2016-03-19 13:27:13 +0000
committerStefan Bühler <stbuehler@web.de>2016-03-19 13:27:13 +0000
commit00063098c1e435985f7caf42138d6674b4e29bb3 (patch)
treed22470c4b175e240cf14ad6b58e01107ade7e859 /src/network.c
parent82ee3fb2f83441c8b8e06e5fba9b9268d8d9db1c (diff)
downloadlighttpd1.4-00063098c1e435985f7caf42138d6674b4e29bb3.tar.gz
lighttpd1.4-00063098c1e435985f7caf42138d6674b4e29bb3.zip
[ssl] support disabling ssl.verifyclient.activate in SNI callback (fixes #2531)
From: Stefan Bühler <stbuehler@web.de> git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@3107 152afb58-edef-0310-8abb-c4023f1b3aa9
Diffstat (limited to 'src/network.c')
-rw-r--r--src/network.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/network.c b/src/network.c
index 017d77dd..a6022e81 100644
--- a/src/network.c
+++ b/src/network.c
@@ -151,6 +151,8 @@ static int network_ssl_servername_callback(SSL *ssl, int *al, server *srv) {
NULL
);
SSL_set_verify_depth(ssl, con->conf.ssl_verifyclient_depth);
+ } else {
+ SSL_set_verify(ssl, SSL_VERIFY_NONE, NULL);
}
return SSL_TLSEXT_ERR_OK;