From: Daniel Stenberg <daniel@haxx.se>
Date: Fri, 14 Nov 2025 15:42:23 +0000 (+0100)
Subject: vquic-tls/gnutls: call Curl_gtls_verifyserver unconditionally
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3d91ca8cdb3b434226e743946d428b4dd3acf2c9;p=thirdparty%2Fcurl.git

vquic-tls/gnutls: call Curl_gtls_verifyserver unconditionally

Closes #19531
---

diff --git a/lib/vquic/vquic-tls.c b/lib/vquic/vquic-tls.c
index f4ef06c33b..46bb4c7d4c 100644
--- a/lib/vquic/vquic-tls.c
+++ b/lib/vquic/vquic-tls.c
@@ -168,13 +168,11 @@ CURLcode Curl_vquic_tls_verify_peer(struct curl_tls_ctx *ctx,
   (void)conn_config;
   result = Curl_ossl_check_peer_cert(cf, data, &ctx->ossl, peer);
 #elif defined(USE_GNUTLS)
-  if(conn_config->verifyhost) {
-    result = Curl_gtls_verifyserver(cf, data, ctx->gtls.session,
-                                    conn_config, &data->set.ssl, peer,
-                                    data->set.str[STRING_SSL_PINNEDPUBLICKEY]);
-    if(result)
-      return result;
-  }
+  result = Curl_gtls_verifyserver(cf, data, ctx->gtls.session,
+                                  conn_config, &data->set.ssl, peer,
+                                  data->set.str[STRING_SSL_PINNEDPUBLICKEY]);
+  if(result)
+    return result;
 #elif defined(USE_WOLFSSL)
   (void)data;
   if(conn_config->verifyhost) {