X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=dtls.c;fp=dtls.c;h=37721131ec9ef95d953916ecd9981bdd9a21d040;hb=3682c935facf5ccd7fa600644bbb76957155c680;hp=bbebfefd03d6b1faef911da7af6a88f9a4ee61f6;hpb=b04eb90fde13f88772c338ca32a55a7063f2e33d;p=radsecproxy.git diff --git a/dtls.c b/dtls.c index bbebfef..3772113 100644 --- a/dtls.c +++ b/dtls.c @@ -354,6 +354,7 @@ void *dtlsservernew(void *arg) { X509 *cert = NULL; SSL_CTX *ctx = NULL; uint8_t delay = 60; + struct tls *accepted_tls = NULL; debug(DBG_DBG, "dtlsservernew: starting"); conf = find_clconf(handle, (struct sockaddr *)¶ms->addr, NULL); @@ -367,10 +368,11 @@ void *dtlsservernew(void *arg) { cert = verifytlscert(ssl); if (!cert) goto exit; + accepted_tls = conf->tlsconf; } while (conf) { - if (verifyconfcert(cert, conf)) { + if (accepted_tls == conf->tlsconf && verifyconfcert(cert, conf)) { X509_free(cert); client = addclient(conf, 1); if (client) {