From 5bb3b7d1c08100d677baebbc3138594ddb01e9d0 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Wed, 15 Dec 2010 11:11:20 +0100 Subject: [PATCH 2/2] axtls_connect: allow connect without peer verification The SSL_SERVER_VERIFY_LATER bit in the ssl_ctx_new() call allows the code to verify the peer certificate explicitly after the handshake and then the "data->set.ssl.verifypeer" option works. --- lib/axtls.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/lib/axtls.c b/lib/axtls.c index 855b554..152de6f 100644 --- a/lib/axtls.c +++ b/lib/axtls.c @@ -156,7 +156,7 @@ Curl_axtls_connect(struct connectdata *conn, const char *x509; /* Assuming users will not compile in custom key/cert to axTLS */ - uint32_t client_option = SSL_NO_DEFAULT_KEY; + uint32_t client_option = SSL_NO_DEFAULT_KEY|SSL_SERVER_VERIFY_LATER; if(conn->ssl[sockindex].state == ssl_connection_complete) /* to make us tolerant against being called more than once for the -- 1.7.2.3