From: Timo Sirainen <timo.sirainen@dovecot.fi>
Date: Thu, 14 Dec 2017 20:59:30 +0000 (+0200)
Subject: lib-ssl-iostream: If allow_invalid_cert=TRUE, skip verifying hostname
X-Git-Tag: 2.3.9~2653
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bcb65da2bec56ee1baadc9f0233f12dce5d06ddd;p=thirdparty%2Fdovecot%2Fcore.git

lib-ssl-iostream: If allow_invalid_cert=TRUE, skip verifying hostname
---

diff --git a/src/lib-ssl-iostream/iostream-openssl.c b/src/lib-ssl-iostream/iostream-openssl.c
index 81b006b688..8f023eb0b5 100644
--- a/src/lib-ssl-iostream/iostream-openssl.c
+++ b/src/lib-ssl-iostream/iostream-openssl.c
@@ -602,6 +602,8 @@ static bool
 openssl_iostream_cert_match_name(struct ssl_iostream *ssl_io,
 				 const char *verify_name, const char **reason_r)
 {
+	if (ssl_io->allow_invalid_cert)
+		return TRUE;
 	if (!ssl_iostream_has_valid_client_cert(ssl_io)) {
 		*reason_r = "Invalid certificate";
 		return FALSE;