From: Petr Štetiar <ynezz@true.cz>
Date: Thu, 10 Dec 2020 11:21:33 +0000 (+0100)
Subject: ustream-mbedtls: implement set_require_validation
X-Git-Url: http://git.openwrt.org/%22https:/collectd.org//%22/%22https:/collectd.org/%22?a=commitdiff_plain;h=55c3fd89d50805b7bdd5bcee3a43986f983f20db;p=project%2Fustream-ssl.git

ustream-mbedtls: implement set_require_validation

In commit "ustream-openssl: wolfSSL: fix certificate validation" we've
added new set_require_validation() function so implement it for mbed TLS
as well.

Signed-off-by: Petr Štetiar <ynezz@true.cz>
---

diff --git a/ustream-mbedtls.c b/ustream-mbedtls.c
index 3424743..1bea983 100644
--- a/ustream-mbedtls.c
+++ b/ustream-mbedtls.c
@@ -290,6 +290,18 @@ __hidden int __ustream_ssl_set_ciphers(struct ustream_ssl_ctx *ctx, const char *
 	return 0;
 }
 
+__hidden int __ustream_ssl_set_require_validation(struct ustream_ssl_ctx *ctx, bool require)
+{
+	int mode = MBEDTLS_SSL_VERIFY_OPTIONAL;
+
+	if (!require)
+		mode = MBEDTLS_SSL_VERIFY_NONE;
+
+	mbedtls_ssl_conf_authmode(&ctx->conf, mode);
+
+	return 0;
+}
+
 __hidden void __ustream_ssl_context_free(struct ustream_ssl_ctx *ctx)
 {
 #if defined(MBEDTLS_SSL_CACHE_C)