From 180e2ec1359378172135472148c99a2d14e873cc Mon Sep 17 00:00:00 2001 From: Alexander Barton Date: Sat, 6 Jan 2024 15:55:54 +0100 Subject: [PATCH] S2S-TLS: Verify the TLS certificates by default This is already mentioned as the default in the manual page and the sample configuration file, but was actually not enabled in the code! --- src/ngircd/conf.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/ngircd/conf.c b/src/ngircd/conf.c index 86a62247..441b8f67 100644 --- a/src/ngircd/conf.c +++ b/src/ngircd/conf.c @@ -2338,6 +2338,11 @@ Init_Server_Struct( CONF_SERVER *Server ) Proc_InitStruct(&Server->res_stat); Server->conn_id = NONE; memset(&Server->bind_addr, 0, sizeof(Server->bind_addr)); + +#ifdef SSL_SUPPORT + /* Verify SSL connections by default! */ + Server->SSLVerify = true; +#endif } /* -eof- */ -- 2.39.2