kore

a fork of the worlds most advanced web framework
Log | Files | Refs | README | LICENSE

commit 39467847fb2bdbcb8dccb1f9b68282b802281b6d
parent 3f083d6126e7d25be57d7403a129c6c0c718422d
Author: Joris Vink <joris@coders.se>
Date:   Mon, 21 Jan 2019 10:36:50 +0100

remove SSL_get_verify_result() check.

If peer verification is turned on this becomes part of the handshake
process anyway and SSL_accept() will fail when appropriate.

Diffstat:
Msrc/connection.c | 12------------
1 file changed, 0 insertions(+), 12 deletions(-)

diff --git a/src/connection.c b/src/connection.c @@ -305,18 +305,6 @@ kore_connection_handle(struct connection *c) c->cert = NULL; } - r = SSL_get_verify_result(c->ssl); - switch (r) { - case X509_V_OK: - case X509_V_ERR_CRL_NOT_YET_VALID: - case X509_V_ERR_CRL_HAS_EXPIRED: - break; - default: - kore_debug("SSL_get_verify_result(): %d, %s", - r, ssl_errno_s); - return (KORE_RESULT_ERROR); - } - if (c->owner != NULL) { listener = (struct listener *)c->owner; if (listener->connect != NULL) {