summaryrefslogtreecommitdiff
path: root/lib/gnutls_handshake.c
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2013-02-09 13:21:58 +0100
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2013-02-09 13:21:58 +0100
commit5a7f08063f0c41cf1227769e4775f77f0270b2b2 (patch)
tree3eb18c09a8f3b69ca4c88456261a62bec7d05bbe /lib/gnutls_handshake.c
parent156a7ec8c591ec1fe32ab5479051a314a6529a46 (diff)
downloadgnutls-5a7f08063f0c41cf1227769e4775f77f0270b2b2.tar.gz
Do not call the certificate verification callback if certificates are ignored.
Diffstat (limited to 'lib/gnutls_handshake.c')
-rw-r--r--lib/gnutls_handshake.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 4be633881f..5bc7d70815 100644
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -2497,7 +2497,8 @@ static int run_verify_callback(gnutls_session_t session, unsigned int side)
if (type != GNUTLS_CRD_CERTIFICATE)
return 0;
- if (cred != NULL && cred->verify_callback != NULL)
+ if (cred != NULL && cred->verify_callback != NULL &&
+ session->internals.send_cert_req != GNUTLS_CERT_IGNORE)
{
ret = cred->verify_callback (session);
if (ret < -1)