Commit c636c1c4 authored by Viktor Dukhovni's avatar Viktor Dukhovni
Browse files

Fix client verify mode to check SSL_VERIFY_PEER



The original check for != SSL_VERIFY_NONE can give surprising results
when flags SSL_VERIFY_PEER is not set, but other flags are.  Note
that SSL_VERIFY_NONE (0) is not a flag bit, it is rather the absense
of all other flag bits.

Signed-off-by: default avatarRob Percival <robpercival@google.com>
Reviewed-by: default avatarEmilia Käsper <emilia@openssl.org>
parent 6afef8b1
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment