diff options
| author | Laurent Bercot <ska-skaware@skarnet.org> | 2026-04-13 03:53:16 +0000 |
|---|---|---|
| committer | Laurent Bercot <ska-skaware@skarnet.org> | 2026-04-13 03:53:16 +0000 |
| commit | afc46cad9ae4d6df594820c6cd7f10bf6b5a0271 (patch) | |
| tree | 9123599c1bc21649ac1df89349bc4b7a467ea0ce /src/qmail-remote/tls.c | |
| parent | cf87d62f16c3dce2d6f8fa144c35ae3ec12691cb (diff) | |
| download | smtpd-starttls-proxy-afc46cad9ae4d6df594820c6cd7f10bf6b5a0271.tar.gz | |
Don't verify certificates if tlsstrictness < 2
Diffstat (limited to 'src/qmail-remote/tls.c')
| -rw-r--r-- | src/qmail-remote/tls.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/qmail-remote/tls.c b/src/qmail-remote/tls.c index 88a2370..9689578 100644 --- a/src/qmail-remote/tls.c +++ b/src/qmail-remote/tls.c @@ -44,7 +44,7 @@ void run_tls (int fdr, char const *fmtip, unsigned int timeoutconnect, unsigned char fmtw[UINT_FMT] ; char fmtt[UINT_FMT] ; char fmtk[UINT_FMT] ; - char const *argv[23 + n] ; + char const *argv[24 + n] ; if (fdw == -1) qmailr_tempusys("duplicate file descriptor") ; if (pipe(p) == -1) qmailr_tempusys("pipe") ; @@ -74,6 +74,8 @@ void run_tls (int fdr, char const *fmtip, unsigned int timeoutconnect, unsigned argv[m++] = fmtw ; argv[m++] = "-k" ; argv[m++] = storage + mxnamepos ; + if (qtls->strictness < 2) + argv[m++] = "--no-verify-cert" ; /* don't need full webpki if SMTPS isn't enforced */ argv[m++] = "--" ; argv[m++] = SMTPD_STARTTLS_PROXY_LIBEXECPREFIX "qmail-remote-io" ; |