summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMattes D <github@xoft.cz>2014-05-10 09:21:29 +0200
committerMattes D <github@xoft.cz>2014-05-10 09:21:29 +0200
commit683b839e2b3e634dd1a0a5b85327efe4ffa968fd (patch)
tree0608319fb93d71611e8ff54fc79c27f8989471e7
parentFixed cert filename in Linux script. (diff)
downloadcuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.tar
cuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.tar.gz
cuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.tar.bz2
cuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.tar.lz
cuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.tar.xz
cuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.tar.zst
cuberite-683b839e2b3e634dd1a0a5b85327efe4ffa968fd.zip
-rw-r--r--src/PolarSSL++/SslContext.cpp2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/PolarSSL++/SslContext.cpp b/src/PolarSSL++/SslContext.cpp
index bc397b655..c3074f197 100644
--- a/src/PolarSSL++/SslContext.cpp
+++ b/src/PolarSSL++/SslContext.cpp
@@ -59,7 +59,7 @@ int cSslContext::Initialize(bool a_IsClient, const SharedPtr<cCtrDrbgContext> &
return res;
}
ssl_set_endpoint(&m_Ssl, a_IsClient ? SSL_IS_CLIENT : SSL_IS_SERVER);
- ssl_set_authmode(&m_Ssl, SSL_VERIFY_OPTIONAL);
+ ssl_set_authmode(&m_Ssl, a_IsClient ? SSL_VERIFY_OPTIONAL : SSL_VERIFY_NONE); // Clients ask for server's cert but don't verify strictly; servers don't ask clients for certs by default
ssl_set_rng(&m_Ssl, ctr_drbg_random, &m_CtrDrbg->m_CtrDrbg);
ssl_set_bio(&m_Ssl, ReceiveEncrypted, this, SendEncrypted, this);