]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
login-common: Don't set allow_invalid_cert=TRUE anymore for SSL server
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Thu, 15 Jun 2023 23:20:12 +0000 (02:20 +0300)
committerAki Tuomi <aki.tuomi@open-xchange.com>
Wed, 12 Feb 2025 10:34:09 +0000 (12:34 +0200)
It's now done automatically.

src/login-common/client-common.c

index 51a857d18ba55e3813a8e75525193b3b61a92fd8..731fcd368f2220094f70230fb5bf4d822d6d8995 100644 (file)
@@ -713,9 +713,6 @@ int client_init_ssl(struct client *client)
 
        master_service_ssl_server_settings_to_iostream_set(client->ssl_set,
                client->ssl_server_set, pool_datastack_create(), &ssl_set);
-       /* If the client cert is invalid, we'll reply NO to the login
-          command. */
-       ssl_set.allow_invalid_cert = TRUE;
        if (ssl_iostream_server_context_cache_get(&ssl_set, &ssl_ctx, &error) < 0) {
                e_error(client->event,
                        "Failed to initialize SSL server context: %s", error);