From c7737d969bb640f8d13f14152e76cf3bc3850bc9 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Thu, 24 Sep 2020 11:14:36 +0200 Subject: [PATCH] chat(): Don't send the certificate error response if the certificate hasn't been verified --- jcc.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/jcc.c b/jcc.c index 4119e4a5..b6c1c109 100644 --- a/jcc.c +++ b/jcc.c @@ -4118,10 +4118,12 @@ static void chat(struct client_state *csp) else { /* - * If server certificate is invalid, we must inform client and then - * close connection with client. + * If server certificate has been verified and is invalid, + * we must inform the client and then close the connection + * with client and server. */ - if (csp->server_cert_verification_result != SSL_CERT_VALID) + if (csp->server_cert_verification_result != SSL_CERT_VALID && + csp->server_cert_verification_result != SSL_CERT_NOT_VERIFIED) { ssl_send_certificate_error(csp); close_client_and_server_ssl_connections(csp); -- 2.39.2