From 422febf15dd93d942e80430f919dbbb233de0ca3 Mon Sep 17 00:00:00 2001 From: jb-gcx <64149598+jb-gcx@users.noreply.github.com> Date: Wed, 11 Nov 2020 18:12:39 +0100 Subject: [PATCH] (openssl) Always set verify peer when it is not disabled (#250) --- ixwebsocket/IXSocketOpenSSL.cpp | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/ixwebsocket/IXSocketOpenSSL.cpp b/ixwebsocket/IXSocketOpenSSL.cpp index a504a5cb..60988e34 100644 --- a/ixwebsocket/IXSocketOpenSSL.cpp +++ b/ixwebsocket/IXSocketOpenSSL.cpp @@ -503,14 +503,14 @@ namespace ix errMsg += ERR_error_string(sslErr, nullptr); return false; } - - SSL_CTX_set_verify( - _ssl_context, SSL_VERIFY_PEER, [](int preverify, X509_STORE_CTX*) -> int { - return preverify; - }); - SSL_CTX_set_verify_depth(_ssl_context, 4); } } + + SSL_CTX_set_verify( + _ssl_context, SSL_VERIFY_PEER, [](int preverify, X509_STORE_CTX*) -> int { + return preverify; + }); + SSL_CTX_set_verify_depth(_ssl_context, 4); } else {