From 7bb6d7d1ee8dd76449d1ed8a746d82050344380b Mon Sep 17 00:00:00 2001 From: Doug MacEachern Date: Fri, 5 Apr 2002 02:31:04 +0000 Subject: [PATCH] PR: Obtained from: Submitted by: Reviewed by: avoid the error_log message: [error] mod_ssl: Certificate Verification: Error ... if SSLProxyVerify is not configured or set to "none". the verify callback does not happen in the server context when SSLVerify is not configured or set to "none". git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94444 13f79535-47bb-0310-9956-ffa450edef68 --- modules/ssl/ssl_engine_kernel.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/modules/ssl/ssl_engine_kernel.c b/modules/ssl/ssl_engine_kernel.c index d06f8ff4e8..d34f2f26ac 100644 --- a/modules/ssl/ssl_engine_kernel.c +++ b/modules/ssl/ssl_engine_kernel.c @@ -1305,6 +1305,15 @@ int ssl_callback_SSLVerify(int ok, X509_STORE_CTX *ctx) verify = mctx->auth.verify_mode; } + if (verify == SSL_CVERIFY_NONE) { + /* + * SSLProxyVerify is either not configured or set to "none". + * (this callback doesn't happen in the server context if SSLVerify + * is not configured or set to "none") + */ + return TRUE; + } + if (ssl_verify_error_is_optional(errnum) && (verify == SSL_CVERIFY_OPTIONAL_NO_CA)) { -- 2.40.0