Browse Source

Disable server verification on Windows

Paul-Louis Ageneau 5 years ago
parent
commit
63f10303e0
1 changed files with 5 additions and 0 deletions
  1. 5 0
      src/tlstransport.cpp

+ 5 - 0
src/tlstransport.cpp

@@ -269,7 +269,12 @@ TlsTransport::TlsTransport(shared_ptr<TcpTransport> lower, string host, state_ca
 		SSL_CTX_set_quiet_shutdown(mCtx, 1);
 		SSL_CTX_set_quiet_shutdown(mCtx, 1);
 		SSL_CTX_set_info_callback(mCtx, InfoCallback);
 		SSL_CTX_set_info_callback(mCtx, InfoCallback);
 
 
+		// SSL_CTX_set_default_verify_paths() does nothing on Windows
+#ifndef _WIN32
 		if (SSL_CTX_set_default_verify_paths(mCtx)) {
 		if (SSL_CTX_set_default_verify_paths(mCtx)) {
+#else
+		if (false) {
+#endif
 			PLOG_INFO << "SSL root CA certificates available, server verification enabled";
 			PLOG_INFO << "SSL root CA certificates available, server verification enabled";
 			SSL_CTX_set_verify(mCtx, SSL_VERIFY_PEER, NULL);
 			SSL_CTX_set_verify(mCtx, SSL_VERIFY_PEER, NULL);
 			SSL_CTX_set_verify_depth(mCtx, 4);
 			SSL_CTX_set_verify_depth(mCtx, 4);