]> arthur.barton.de Git - ngircd.git/commitdiff
S2S-TLS: Verify the TLS certificates by default
authorAlexander Barton <alex@barton.de>
Sat, 6 Jan 2024 14:55:54 +0000 (15:55 +0100)
committerAlexander Barton <alex@barton.de>
Sat, 23 Mar 2024 19:19:01 +0000 (20:19 +0100)
This is already mentioned as the default in the manual page and the
sample configuration file, but was actually not enabled in the code!

src/ngircd/conf.c

index 86a622475c7d0a54dee7ac5b99be9d087271085c..441b8f6786f6780451e3fec9f62052792d533eaf 100644 (file)
@@ -2338,6 +2338,11 @@ Init_Server_Struct( CONF_SERVER *Server )
        Proc_InitStruct(&Server->res_stat);
        Server->conn_id = NONE;
        memset(&Server->bind_addr, 0, sizeof(Server->bind_addr));
+
+#ifdef SSL_SUPPORT
+       /* Verify SSL connections by default! */
+       Server->SSLVerify = true;
+#endif
 }
 
 /* -eof- */