| commit | c636c1c470fd2b4b0cb546e6ee85971375e42ec1 | [log] [tgz] |
|---|---|---|
| author | Viktor Dukhovni <openssl-users@dukhovni.org> | Sat Apr 02 16:47:48 2016 -0400 |
| committer | Viktor Dukhovni <openssl-users@dukhovni.org> | Thu Apr 07 14:41:34 2016 -0400 |
| tree | 68c9a306d606ae2bae3a77ee677999209ccdd7b4 | |
| parent | 6afef8b1fb679df7d6a8606d713192c9907b1890 [diff] |
Fix client verify mode to check SSL_VERIFY_PEER The original check for != SSL_VERIFY_NONE can give surprising results when flags SSL_VERIFY_PEER is not set, but other flags are. Note that SSL_VERIFY_NONE (0) is not a flag bit, it is rather the absense of all other flag bits. Signed-off-by: Rob Percival <robpercival@google.com> Reviewed-by: Emilia Käsper <emilia@openssl.org>