]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
lib-http: client: Fix using non-context SSL settings
authorTimo Sirainen <timo.sirainen@dovecot.fi>
Thu, 8 Feb 2018 11:27:25 +0000 (13:27 +0200)
committerTimo Sirainen <timo.sirainen@dovecot.fi>
Thu, 8 Feb 2018 13:04:31 +0000 (15:04 +0200)
The SSL settings were used for the SSL context, but they weren't used for
individual SSL streams. This broke stream-only settings, like
allow_invalid_cert=TRUE.

src/lib-http/http-client-connection.c

index d28a11dd17394f4aa93466f1108a5d6929bd4508..9d12a0ef1bec37699e796b710c976f151d893799 100644 (file)
@@ -1383,7 +1383,7 @@ http_client_connection_ssl_init(struct http_client_connection *conn,
 
        i_assert(ssl_ctx != NULL);
 
-       i_zero(&ssl_set);
+       ssl_set = *set->ssl;
        if (!set->ssl->allow_invalid_cert) {
                ssl_set.verbose_invalid_cert = TRUE;
        }