ApiListener: fix self-made security hole

diff --git a/lib/remote/apilistener.cpp b/lib/remote/apilistener.cpp
index ebe18358b1cfd3e13a93011b05c4041f537e58b8..d56c532bf77d846ba6a44463871d0fbde60239c2 100644 (file)
--- a/lib/remote/apilistener.cpp
+++ b/lib/remote/apilistener.cpp
@@ -629,6 +629,8 @@ void ApiListener::NewClientHandlerInternal(boost::asio::yield_context yc, const
                        log << " (no Endpoint object found for identity)";
                }
        } else {
+               verify_ok = false;
+
                Log(LogInformation, "ApiListener")
                        << "New client connection " << conninfo << " (no client certificate)";
        }