]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
More duplicate code (tls_new_session also sets client cert verification flags)
authorArran Cudbard-Bell <a.cudbardb@freeradius.org>
Thu, 4 Jun 2015 17:17:36 +0000 (11:17 -0600)
committerArran Cudbard-Bell <a.cudbardb@freeradius.org>
Thu, 4 Jun 2015 17:30:17 +0000 (11:30 -0600)
src/modules/rlm_eap/libeap/eap_tls.c

index 251703e1fa544ee3c2688964756600e3180a11d3..83d34f11bd3da725aacd67ac92c361a1a8e92b5c 100644 (file)
@@ -81,17 +81,6 @@ tls_session_t *eaptls_session(eap_handler_t *handler, fr_tls_server_conf_t *tls_
                return NULL;
        }
 
-       /*
-        *      Verify the peer certificate, if asked.
-        */
-       if (client_cert) {
-               RDEBUG2("Requiring client certificate");
-               verify_mode = SSL_VERIFY_PEER;
-               verify_mode |= SSL_VERIFY_FAIL_IF_NO_PEER_CERT;
-               verify_mode |= SSL_VERIFY_CLIENT_ONCE;
-       }
-       SSL_set_verify(ssn->ssl, verify_mode, cbtls_verify);
-
        /*
         *      Create a structure for all the items required to be
         *      verified for each client and set that as opaque data