From: Badlop <badlop@process-one.net>
Date: Fri, 25 Jun 2010 15:15:28 +0000 (+0200)
Subject: Don't ask for client certificate when using tls (EJAB-1267)
X-Git-Tag: v2.1.5~36
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=3ab90c9d3a951b8e320d1e928a048c4649449b77;p=ejabberd

Don't ask for client certificate when using tls (EJAB-1267)
---

diff --git a/src/web/ejabberd_http.erl b/src/web/ejabberd_http.erl
index 4e1f14320..2f2315017 100644
--- a/src/web/ejabberd_http.erl
+++ b/src/web/ejabberd_http.erl
@@ -87,9 +87,10 @@ start_link(SockData, Opts) ->
 
 init({SockMod, Socket}, Opts) ->
     TLSEnabled = lists:member(tls, Opts),
-    TLSOpts = lists:filter(fun({certfile, _}) -> true;
+    TLSOpts1 = lists:filter(fun({certfile, _}) -> true;
 			      (_) -> false
 			   end, Opts),
+    TLSOpts = [verify_none | TLSOpts1],
     {SockMod1, Socket1} =
 	if
 	    TLSEnabled ->