diff options
| author | Laurent Bercot <ska-skaware@skarnet.org> | 2026-04-13 03:32:51 +0000 |
|---|---|---|
| committer | Laurent Bercot <ska-skaware@skarnet.org> | 2026-04-13 03:32:51 +0000 |
| commit | 030078b7bf67a4307623f1a5c58284561ff64a56 (patch) | |
| tree | 908d840523cf84fad55753a1dc16cee31a1a0d65 /src/stls | |
| parent | c2ffcd960ba55570fb701de2b9f4e2ad6e1d628d (diff) | |
| download | s6-networking-030078b7bf67a4307623f1a5c58284561ff64a56.tar.gz | |
Implement --no-verify-cert for s6-tlsc and s6-tlsc-io
Diffstat (limited to 'src/stls')
| -rw-r--r-- | src/stls/stls_client_init_and_handshake.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/stls/stls_client_init_and_handshake.c b/src/stls/stls_client_init_and_handshake.c index 6f0e248..d68d3a9 100644 --- a/src/stls/stls_client_init_and_handshake.c +++ b/src/stls/stls_client_init_and_handshake.c @@ -64,7 +64,9 @@ struct tls *stls_client_init_and_handshake (int const *fds, tain const *tto, uin if (tls_config_set_ecdhecurve(cfg, "auto") < 0) diecfg(cfg, "tls_config_set_ecdhecurve") ; - tls_config_verify(cfg) ; + if (preoptions & 2) tls_config_insecure_noverifycert(cfg) ; + else tls_config_verify(cfg) ; + tls_config_set_protocols(cfg, TLS_PROTOCOLS_ALL) ; tls_config_prefer_ciphers_server(cfg) ; if (!servername) tls_config_insecure_noverifyname(cfg) ; |