From f763ff4c372b563af7f4bd4a6b69a13cb8fdada7 Mon Sep 17 00:00:00 2001 From: yuanjm Date: Fri, 26 Jul 2019 16:35:11 +0800 Subject: [PATCH] fix(ssl): fix ssl verify mode not match --- components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c b/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c index 59f18e6a..96f2e91d 100644 --- a/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c +++ b/components/ssl/mbedtls/port/openssl/source/platform/ssl_pm.c @@ -185,9 +185,9 @@ static int ssl_pm_reload_crt(SSL *ssl) struct x509_pm *crt_pm = (struct x509_pm *)ssl->cert->x509->x509_pm; if (ssl->verify_mode == SSL_VERIFY_PEER) - mode = MBEDTLS_SSL_VERIFY_REQUIRED; - else if (ssl->verify_mode == SSL_VERIFY_FAIL_IF_NO_PEER_CERT) mode = MBEDTLS_SSL_VERIFY_OPTIONAL; + else if (ssl->verify_mode == SSL_VERIFY_FAIL_IF_NO_PEER_CERT) + mode = MBEDTLS_SSL_VERIFY_REQUIRED; else if (ssl->verify_mode == SSL_VERIFY_CLIENT_ONCE) mode = MBEDTLS_SSL_VERIFY_UNSET; else