From b9241bdef9183c29fb3b05bae9f0810f5dc306c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?P=C5=99emysl=20Janouch?= Date: Sun, 12 Jul 2015 22:10:28 +0200 Subject: [PATCH] ZyklonB: fix certificate verification --- zyklonb.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/zyklonb.c b/zyklonb.c index 35eac17..49d4fc5 100644 --- a/zyklonb.c +++ b/zyklonb.c @@ -322,9 +322,8 @@ irc_initialize_ssl_ctx (struct bot_context *ctx, struct error **e) bool verify; if (!irc_get_boolean_from_config (ctx, "ssl_verify", &verify, e)) return false; - - if (!verify) - SSL_CTX_set_verify (ctx->ssl_ctx, SSL_VERIFY_NONE, NULL); + SSL_CTX_set_verify (ctx->ssl_ctx, + verify ? SSL_VERIFY_PEER : SSL_VERIFY_NONE, NULL); const char *ca_file = str_map_find (&ctx->config, "ca_file"); const char *ca_path = str_map_find (&ctx->config, "ca_path");