From db33af71040e2cf36ebe0a170b2641c41826163a Mon Sep 17 00:00:00 2001 From: twosee Date: Thu, 4 Mar 2021 14:07:54 +0800 Subject: [PATCH] Remove duplicated SSL_CTX_set_verify() Duplicated with line 920. Our minimal OpenSSL version is v1.0.1 (See https://github.com/openssl/openssl/blob/OpenSSL_1_0_1-stable/ssl/ssl_lib.c#L2039). Removing it does not affect program behavior. Closes GH-6751. --- ext/openssl/xp_ssl.c | 1 - 1 file changed, 1 deletion(-) diff --git a/ext/openssl/xp_ssl.c b/ext/openssl/xp_ssl.c index d06db22be5..9918e0c751 100644 --- a/ext/openssl/xp_ssl.c +++ b/ext/openssl/xp_ssl.c @@ -907,7 +907,6 @@ static int php_openssl_enable_peer_verification(SSL_CTX *ctx, php_stream *stream } else { #ifdef PHP_WIN32 SSL_CTX_set_cert_verify_callback(ctx, php_openssl_win_cert_verify_callback, (void *)stream); - SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL); #else if (sslsock->is_client && !SSL_CTX_set_default_verify_paths(ctx)) { php_error_docref(NULL, E_WARNING, -- 2.40.0