From 2d0c1c42afd1e50864312890c9e3909294bf21ed Mon Sep 17 00:00:00 2001
From: Dirk Engling <erdgeist@erdgeist.org>
Date: Fri, 15 Apr 2016 13:07:48 +0200
Subject: Also allow ignoring SSL error, if fingerprinting is enabled
---
vchat-ssl.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/vchat-ssl.c b/vchat-ssl.c
index fab5ffe..2a1c28a 100755
--- a/vchat-ssl.c
+++ b/vchat-ssl.c
@@ -197,7 +197,7 @@ int vc_connect_ssl( BIO **conn, vc_x509store_t *vc_store )
}
#else
/* show & verify fingerprint */
- if (result == X509_V_OK) {
+ if ((result == X509_V_OK) || getintoption(CF_IGNSSL)) {
X509 *peercert = SSL_get_peer_certificate(sslp);
/* FIXME: this IS bad code */
--
cgit v1.2.3