mirror of
https://github.com/oasislinux/oasis.git
synced 2026-10-08 12:58:46 +02:00
31 lines
850 B
Diff
31 lines
850 B
Diff
From 430580cf1df1fe85f7401ebf3e0005b9f72bfac7 Mon Sep 17 00:00:00 2001
|
|
From: Michael Forney <mforney@mforney.org>
|
|
Date: Thu, 13 May 2021 22:17:56 -0700
|
|
Subject: [PATCH] Use patched bearssl flag to force CertificateRequest
|
|
|
|
---
|
|
tls_server.c | 7 +------
|
|
1 file changed, 1 insertion(+), 6 deletions(-)
|
|
|
|
diff --git a/tls_server.c b/tls_server.c
|
|
index 87bf4f4..f03d326 100644
|
|
--- a/tls_server.c
|
|
+++ b/tls_server.c
|
|
@@ -332,12 +332,7 @@ tls_accept_common(struct tls *ctx)
|
|
if (tls_configure_x509(conn_ctx) != 0)
|
|
goto err;
|
|
|
|
- if (ctx->config->ca_len == 0) {
|
|
- tls_set_errorx(ctx, TLS_ERROR_UNKNOWN,
|
|
- "cannot verify client without trust anchors");
|
|
- goto err;
|
|
- }
|
|
-
|
|
+ flags |= BR_OPT_REQUEST_CLIENT_CERT;
|
|
br_ssl_server_set_trust_anchor_names_alt(&conn_ctx->conn->u.server,
|
|
ctx->config->ca, ctx->config->ca_len);
|
|
|
|
--
|
|
2.49.0
|
|
|