summaryrefslogtreecommitdiffstats
path: root/src/PolarSSL++/SslContext.cpp
diff options
context:
space:
mode:
authorMattes D <github@xoft.cz>2016-01-24 17:22:05 +0100
committerMattes D <github@xoft.cz>2016-01-24 17:22:05 +0100
commita62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98 (patch)
treea9883805f27613b8788a11321afe10dd1b39ed40 /src/PolarSSL++/SslContext.cpp
parentMerge pull request #2899 from cuberite/FixHttpParsing (diff)
downloadcuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.tar
cuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.tar.gz
cuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.tar.bz2
cuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.tar.lz
cuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.tar.xz
cuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.tar.zst
cuberite-a62e7ff2c29b387810ad43e47d9c4c3f6dfc4d98.zip
Diffstat (limited to 'src/PolarSSL++/SslContext.cpp')
-rw-r--r--src/PolarSSL++/SslContext.cpp4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/PolarSSL++/SslContext.cpp b/src/PolarSSL++/SslContext.cpp
index 90e0ae0e2..4ff0c3077 100644
--- a/src/PolarSSL++/SslContext.cpp
+++ b/src/PolarSSL++/SslContext.cpp
@@ -61,7 +61,7 @@ int cSslContext::Initialize(bool a_IsClient, const SharedPtr<cCtrDrbgContext> &
return res;
}
ssl_set_endpoint(&m_Ssl, a_IsClient ? SSL_IS_CLIENT : SSL_IS_SERVER);
- ssl_set_authmode(&m_Ssl, a_IsClient ? SSL_VERIFY_OPTIONAL : SSL_VERIFY_NONE); // Clients ask for server's cert but don't verify strictly; servers don't ask clients for certs by default
+ ssl_set_authmode(&m_Ssl, SSL_VERIFY_NONE); // We cannot verify because we don't have a CA chain, required by PolarSSL, implemented yet (TODO)
ssl_set_rng(&m_Ssl, ctr_drbg_random, &m_CtrDrbg->m_CtrDrbg);
ssl_set_bio(&m_Ssl, ReceiveEncrypted, this, SendEncrypted, this);
@@ -85,7 +85,7 @@ int cSslContext::Initialize(bool a_IsClient, const SharedPtr<cCtrDrbgContext> &
0, // Must be 0-terminated!
};
ssl_set_ciphersuites(&m_Ssl, CipherSuites);
- */
+ //*/
#endif
m_IsValid = true;