From: Timo Sirainen <timo.sirainen@open-xchange.com>
Date: Thu, 15 Jun 2023 23:20:12 +0000 (+0300)
Subject: login-common: Don't set allow_invalid_cert=TRUE anymore for SSL server
X-Git-Tag: 2.4.1~1505
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=209fd5a7698da06d63c7720645939fa282013e3f;p=thirdparty%2Fdovecot%2Fcore.git

login-common: Don't set allow_invalid_cert=TRUE anymore for SSL server

It's now done automatically.
---

diff --git a/src/login-common/client-common.c b/src/login-common/client-common.c
index 51a857d18b..731fcd368f 100644
--- a/src/login-common/client-common.c
+++ b/src/login-common/client-common.c
@@ -713,9 +713,6 @@ int client_init_ssl(struct client *client)
 
 	master_service_ssl_server_settings_to_iostream_set(client->ssl_set,
 		client->ssl_server_set, pool_datastack_create(), &ssl_set);
-	/* If the client cert is invalid, we'll reply NO to the login
-	   command. */
-	ssl_set.allow_invalid_cert = TRUE;
 	if (ssl_iostream_server_context_cache_get(&ssl_set, &ssl_ctx, &error) < 0) {
 		e_error(client->event,
 			"Failed to initialize SSL server context: %s", error);