diff --git a/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c b/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c
index 59f18e6a..96f2e91d 100644
--- a/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c
+++ b/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c
@@ -185,9 +185,9 @@ static int ssl_pm_reload_crt(SSL *ssl)
     struct x509_pm *crt_pm = (struct x509_pm *)ssl->cert->x509->x509_pm;
 
     if (ssl->verify_mode == SSL_VERIFY_PEER)
-        mode = MBEDTLS_SSL_VERIFY_REQUIRED;
-    else if (ssl->verify_mode == SSL_VERIFY_FAIL_IF_NO_PEER_CERT)
         mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
+    else if (ssl->verify_mode == SSL_VERIFY_FAIL_IF_NO_PEER_CERT)
+        mode = MBEDTLS_SSL_VERIFY_REQUIRED;
     else if (ssl->verify_mode == SSL_VERIFY_CLIENT_ONCE)
         mode = MBEDTLS_SSL_VERIFY_UNSET;
     else