kore

commit 39467847fb2bdbcb8dccb1f9b68282b802281b6d
parent 3f083d6126e7d25be57d7403a129c6c0c718422d
Author: Joris Vink <joris@coders.se>
Date:   Mon, 21 Jan 2019 10:36:50 +0100

remove SSL_get_verify_result() check.

If peer verification is turned on this becomes part of the handshake
process anyway and SSL_accept() will fail when appropriate.

Diffstat:
src/connection.c
 | 
12
------------

1 file changed, 0 insertions(+), 12 deletions(-)
diff --git a/src/connection.c b/src/connection.c
@@ -305,18 +305,6 @@ kore_connection_handle(struct connection *c)
 			c->cert = NULL;
 		}
 
-		r = SSL_get_verify_result(c->ssl);
-		switch (r) {
-		case X509_V_OK:
-		case X509_V_ERR_CRL_NOT_YET_VALID:
-		case X509_V_ERR_CRL_HAS_EXPIRED:
-			break;
-		default:
-			kore_debug("SSL_get_verify_result(): %d, %s",
-			    r, ssl_errno_s);
-			return (KORE_RESULT_ERROR);
-		}
-
 		if (c->owner != NULL) {
 			listener = (struct listener *)c->owner;
 			if (listener->connect != NULL) {