]> granicus.if.org Git - curl/commit
Revert "openssl: Don't add verify locations when verifypeer==0"
authorGaurav Malhotra <malhotrag@gmail.com>
Tue, 3 Apr 2018 12:41:27 +0000 (18:11 +0530)
committerDaniel Stenberg <daniel@haxx.se>
Fri, 6 Apr 2018 12:25:00 +0000 (14:25 +0200)
commit2536e2450b4b0364d83c315ad2ee01b67f514db0
tree7d53fa64b5780189fdf4498f54d137cf9854cba0
parent336b6a32c0c9bec6bf6ccfc5942a3ce62ff34281
Revert "openssl: Don't add verify locations when verifypeer==0"

This reverts commit dc85437736e1fc90e689bb1f6c51c8f1aa9430eb.

libcurl (with the OpenSSL backend) performs server certificate verification
even if verifypeer == 0 and the verification result is available using
CURLINFO_SSL_VERIFYRESULT. The commit that is being reverted caused the
CURLINFO_SSL_VERIFYRESULT to not have useful information for the
verifypeer == 0 use case (it would always have
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY).

Closes #2451
lib/vtls/openssl.c