Do not call the certificate verification callback if certificates are ignored.

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 4be633881fb20e8b4cc2f0835c07b9b08f1fcc8a..5bc7d708150d554b130e94e7bc9a0105e7884426 100644 (file)
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -2497,7 +2497,8 @@ static int run_verify_callback(gnutls_session_t session, unsigned int side)
   if (type != GNUTLS_CRD_CERTIFICATE)
     return 0;
 
-  if (cred != NULL && cred->verify_callback != NULL)
+  if (cred != NULL && cred->verify_callback != NULL && 
+       session->internals.send_cert_req != GNUTLS_CERT_IGNORE)
     {
       ret = cred->verify_callback (session);
       if (ret < -1)