Daniel Danzberger 4144c1e61b mbedtls-server: Fix broken client verification ... This fixes clients being able to connect with a certicate that was not signed by the configured CA when SSL_VERIFY_FAIL_IF_NO_PEER_CERT is set. The issue only appeared when a client connects via IP address directly and not use a hostname. When the hostname was used to connect, the SNI 'callback lws_mbedtls_sni_cb' overwrote the invalid verfiy mode of MBEDTLS_SSL_VERIFY_OPTIONAL with MBEDTLS_SSL_VERIFY_REQUIRED by calling SSL_set_SSL_CTX. Signed-off-by: Daniel Danzberger <daniel@dd-wrt.com>		2023-09-28 11:06:05 +01:00
..
mbedtls	mbedtls-server: Fix broken client verification	2023-09-28 11:06:05 +01:00
openssl	openssl-server: enum vs int disagreement	2023-06-14 07:14:51 +01:00
CMakeLists.txt	lib/tls/CMakeLists.txt: fix build without threads	2022-06-14 07:37:03 +01:00
lws-gencrypto-common.c	Wextra	2021-07-04 10:29:54 +01:00
lws-genec-common.c	genec: show correct nid when not allowed	2022-02-01 09:13:58 +00:00
private-jit-trust.h	tls: JIT Trust	2021-06-22 15:55:29 +01:00
private-lib-tls.h	openssl: remove lws_ssl_get_error_string as cruft	2021-10-29 20:10:55 +01:00
private-network.h	tls: JIT Trust	2021-06-22 15:55:29 +01:00
tls-client.c	jit-trust: adapt for esp-idf pre v3 mbedtls	2022-03-15 10:28:09 +00:00
tls-jit-trust.c	tls: JIT Trust	2021-06-22 15:55:29 +01:00
tls-network.c	logging: gate_accepts: reduce verbosity	2021-12-13 19:02:56 +00:00
tls-server.c	acme: update for v2	2022-04-11 06:39:55 +01:00
tls-sessions.c	tls-sessions: remove no stash warning	2021-06-24 06:31:39 +01:00
tls.c	base64: improve sanity checking	2022-03-25 08:18:30 +00:00