From 823ea9ba4a39998e3fe210e99e8e59d342fccfda Mon Sep 17 00:00:00 2001 From: Linus Nordberg Date: Thu, 24 Jan 2013 16:51:36 +0100 Subject: [PATCH] Don't verify server certificate if we're using PSK. --- lib/event.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/event.c b/lib/event.c index 3ebc5a7..78a9156 100644 --- a/lib/event.c +++ b/lib/event.c @@ -246,8 +246,9 @@ event_on_connect (struct rs_connection *conn, struct rs_packet *pkt) assert (!conn->is_connecting); #if defined (RS_ENABLE_TLS) - if (conn->realm->type == RS_CONN_TYPE_TLS - || conn->realm->type == RS_CONN_TYPE_DTLS) + if ((conn->realm->type == RS_CONN_TYPE_TLS + || conn->realm->type == RS_CONN_TYPE_DTLS) + && conn->realm->transport_cred->type != RS_CRED_TLS_PSK) if (tls_verify_cert (conn) != RSE_OK) { rs_debug (("%s: server cert verification failed\n", __func__)); -- 2.1.4