From: Aki Tuomi <aki.tuomi@dovecot.fi>
Date: Thu, 2 Mar 2017 07:15:13 +0000 (+0200)
Subject: lib-ssl-iostream: Ensure verify_remote_cert is true
X-Git-Tag: 2.3.0.rc1~1976
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8f251da1b6dfe6dc3d86ae71b377d99afe2d4bd2;p=thirdparty%2Fdovecot%2Fcore.git

lib-ssl-iostream: Ensure verify_remote_cert is true

Forgotten in 38424b8081a75be3ef93729fed4d30dbafca5885
---

diff --git a/src/lib-ssl-iostream/iostream-ssl.c b/src/lib-ssl-iostream/iostream-ssl.c
index 77ff2d81a0..30b213abd7 100644
--- a/src/lib-ssl-iostream/iostream-ssl.c
+++ b/src/lib-ssl-iostream/iostream-ssl.c
@@ -94,7 +94,9 @@ int io_stream_create_ssl_client(struct ssl_iostream_context *ctx, const char *ho
 				struct ssl_iostream **iostream_r,
 				const char **error_r)
 {
-	return ssl_vfuncs->create(ctx, host, set, input, output,
+	struct ssl_iostream_settings set_copy = *set;
+	set_copy.verify_remote_cert = TRUE;
+	return ssl_vfuncs->create(ctx, host, &set_copy, input, output,
 				  iostream_r, error_r);
 }