devs/libstrophe-gh
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added open SSL dummy certificate check callback

Browse Source
This commit is contained in:
James Booth
2015-09-10 23:14:08 +01:00
parent cc486b2ebf
commit f05529b09a
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/tls_openssl.c
View File

@@ -51,6 +51,14 @@ int tls_error(tls_t *tls)
return tls->lasterror; return tls->lasterror;
} }
static int
cert_verify_cb(X509_STORE_CTX *x509ctx, void *arg)
{
xmpp_ctx_t *ctx = (xmpp_ctx_t *)arg;
xmpp_debug(ctx, "TLS", "CERT_VERIFY_CB called");
return 1;
}
tls_t *tls_new(xmpp_ctx_t *ctx, sock_t sock) tls_t *tls_new(xmpp_ctx_t *ctx, sock_t sock)
{ {
tls_t *tls = xmpp_alloc(ctx, sizeof(*tls)); tls_t *tls = xmpp_alloc(ctx, sizeof(*tls));
@@ -65,7 +73,8 @@ tls_t *tls_new(xmpp_ctx_t *ctx, sock_t sock)
SSL_CTX_set_client_cert_cb(tls->ssl_ctx, NULL); SSL_CTX_set_client_cert_cb(tls->ssl_ctx, NULL);
SSL_CTX_set_mode (tls->ssl_ctx, SSL_MODE_ENABLE_PARTIAL_WRITE); SSL_CTX_set_mode (tls->ssl_ctx, SSL_MODE_ENABLE_PARTIAL_WRITE);
SSL_CTX_set_verify (tls->ssl_ctx, SSL_VERIFY_NONE, NULL); SSL_CTX_set_verify (tls->ssl_ctx, SSL_VERIFY_PEER, NULL);
SSL_CTX_set_cert_verify_callback(tls->ssl_ctx, cert_verify_cb, ctx);
tls->ssl = SSL_new(tls->ssl_ctx); tls->ssl = SSL_new(tls->ssl_ctx);