From 259ee2fac4e6dccfc27797aa06c7747ce89af416 Mon Sep 17 00:00:00 2001 From: discomfitor Date: Sat, 2 Oct 2010 22:01:43 +0000 Subject: [PATCH] require peer verification when verify is called git-svn-id: svn+ssh://svn.enlightenment.org/var/svn/e/trunk/ecore@52987 7cbeb6ba-43b4-40fd-8cce-4c39aea84d33 --- src/lib/ecore_con/ecore_con_ssl.c | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/src/lib/ecore_con/ecore_con_ssl.c b/src/lib/ecore_con/ecore_con_ssl.c index 12a763b..767a62b 100644 --- a/src/lib/ecore_con/ecore_con_ssl.c +++ b/src/lib/ecore_con/ecore_con_ssl.c @@ -971,14 +971,9 @@ _ecore_con_ssl_server_prepare_openssl(Ecore_Con_Server *svr, int ssl_type) else if (!svr->use_cert) SSL_ERROR_CHECK_GOTO_ERROR(!SSL_CTX_set_cipher_list(svr->ssl_ctx, "aNULL:!eNULL:!LOW:!EXPORT:!ECDH:RSA:AES:!PSK:@STRENGTH")); - { - X509_STORE *xs; - - xs = SSL_CTX_get_cert_store(svr->ssl_ctx); - X509_STORE_set_flags(xs, X509_V_FLAG_CB_ISSUER_CHECK); - } + SSL_CTX_set_verify(svr->ssl_ctx, SSL_VERIFY_PEER, NULL); - return ECORE_CON_SSL_ERROR_NONE; + return ECORE_CON_SSL_ERROR_NONE; error: if (dh) -- 2.7.4