From: Aki Tuomi <aki.tuomi@dovecot.fi>
Date: Mon, 8 May 2017 09:24:52 +0000 (+0300)
Subject: passdb-imap: Make sure ssl verification is possible with current settings
X-Git-Tag: 2.2.30.rc1~53
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=395b6f66f3f73f147167f78942402189539a695a;p=thirdparty%2Fdovecot%2Fcore.git

passdb-imap: Make sure ssl verification is possible with current settings
---

diff --git a/src/auth/passdb-imap.c b/src/auth/passdb-imap.c
index f2ef27cd17..ade4b39815 100644
--- a/src/auth/passdb-imap.c
+++ b/src/auth/passdb-imap.c
@@ -187,6 +187,11 @@ passdb_imap_preinit(pool_t pool, const char *args)
 		}
 	}
 
+	if (module->set.ssl_verify == TRUE && module->set.ssl_mode != IMAPC_CLIENT_SSL_MODE_NONE ) {
+		if (module->set.ssl_ca_dir == NULL && module->set.ssl_ca_file == NULL)
+			i_fatal("passdb imap: Cannot verify certificate without ssl_ca_dir or ssl_ca_file setting");
+	}
+
 	if (module->set.host == NULL)
 		i_fatal("passdb imap: Missing host parameter");