From 8d15d2aa50153ec7f693e0709b8a2f70ee97381e Mon Sep 17 00:00:00 2001 From: Jeongik Cha Date: Thu, 31 Oct 2024 22:39:43 +0900 Subject: [PATCH] use verify_mode properly in LWS_HAVE_mbedtls_ssl_set_hs_authmode as well --- lib/tls/mbedtls/wrapper/platform/ssl_pm.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/tls/mbedtls/wrapper/platform/ssl_pm.c b/lib/tls/mbedtls/wrapper/platform/ssl_pm.c index 5961f4f11..6fb7b57b5 100755 --- a/lib/tls/mbedtls/wrapper/platform/ssl_pm.c +++ b/lib/tls/mbedtls/wrapper/platform/ssl_pm.c @@ -981,9 +981,9 @@ void SSL_set_SSL_CTX(SSL *ssl, SSL_CTX *ctx) #if defined(LWS_HAVE_mbedtls_ssl_set_hs_authmode) - if (ctx->verify_mode == SSL_VERIFY_PEER) + if ((ctx->verify_mode & SSL_VERIFY_PEER) > 0) mode = MBEDTLS_SSL_VERIFY_REQUIRED; - else if (ctx->verify_mode == SSL_VERIFY_FAIL_IF_NO_PEER_CERT) + else if ((ctx->verify_mode & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) > 0) mode = MBEDTLS_SSL_VERIFY_REQUIRED; else if (ctx->verify_mode == SSL_VERIFY_CLIENT_ONCE) mode = MBEDTLS_SSL_VERIFY_UNSET;