From 19625e62efa3895273a651327356f56ecf1cee9f Mon Sep 17 00:00:00 2001
From: "Alexander A. Klimov" <alexander.klimov@icinga.com>
Date: Wed, 20 Feb 2019 16:07:41 +0100
Subject: [PATCH] ApiListener: fix self-made security hole

---
 lib/remote/apilistener.cpp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/remote/apilistener.cpp b/lib/remote/apilistener.cpp
index ebe18358b..d56c532bf 100644
--- a/lib/remote/apilistener.cpp
+++ b/lib/remote/apilistener.cpp
@@ -629,6 +629,8 @@ void ApiListener::NewClientHandlerInternal(boost::asio::yield_context yc, const
 			log << " (no Endpoint object found for identity)";
 		}
 	} else {
+		verify_ok = false;
+
 		Log(LogInformation, "ApiListener")
 			<< "New client connection " << conninfo << " (no client certificate)";
 	}
-- 
2.40.0