From: Marko Kreen <markokr@gmail.com>
Date: Wed, 3 Feb 2016 10:35:09 +0000 (+0200)
Subject: sbuf: in varify-ca/full checking should not be optional
X-Git-Tag: pgbouncer_1_7_1~14
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6eccac1dd28bc0dfc85561dd9b15de40889abfda;p=pgbouncer

sbuf: in varify-ca/full checking should not be optional
---

diff --git a/src/sbuf.c b/src/sbuf.c
index 7db688a..c754ad9 100644
--- a/src/sbuf.c
+++ b/src/sbuf.c
@@ -927,8 +927,10 @@ static void setup_tls(struct tls_config *conf, const char *pfx, int sslmode,
 	} else {
 		/* TLS server, check client? */
 		if (sslmode == SSLMODE_VERIFY_FULL) {
-			tls_config_verify_client_optional(conf);
+			tls_config_verify_client(conf);
 		} else if (sslmode == SSLMODE_VERIFY_CA) {
+			tls_config_verify_client(conf);
+		} else {
 			tls_config_verify_client_optional(conf);
 		}
 	}