lib-ssl-iostream: If allow_invalid_cert=TRUE, skip verifying hostname

diff --git a/src/lib-ssl-iostream/iostream-openssl.c b/src/lib-ssl-iostream/iostream-openssl.c
index 81b006b688106784d752948651dee3dca8d42f03..8f023eb0b5a592c8d4f34e461edb73abd6564248 100644 (file)
--- a/src/lib-ssl-iostream/iostream-openssl.c
+++ b/src/lib-ssl-iostream/iostream-openssl.c
@@ -602,6 +602,8 @@ static bool
 openssl_iostream_cert_match_name(struct ssl_iostream *ssl_io,
                                 const char *verify_name, const char **reason_r)
 {
+       if (ssl_io->allow_invalid_cert)
+               return TRUE;
        if (!ssl_iostream_has_valid_client_cert(ssl_io)) {
                *reason_r = "Invalid certificate";
                return FALSE;