Actually error out if we're hard verifying the cert chain

diff --git a/src/lib/tls/ctx.c b/src/lib/tls/ctx.c
index d45ccc352b14dc7a06e46c4bc5c66b61a3a3826c..e6ec200277d7257ee253faaf83163c588850531f 100644 (file)
--- a/src/lib/tls/ctx.c
+++ b/src/lib/tls/ctx.c
@@ -247,6 +247,7 @@ static int tls_ctx_load_cert_chain(SSL_CTX *ctx, fr_tls_chain_conf_t const *chai
                        if (!SSL_CTX_build_cert_chain(ctx, mode)) {
                                tls_strerror_printf(NULL);
                                PERROR("Failed verifying chain");
+                               return -1;
                        }
                        break;