From d26f23a1cebec304c2fc023306c50a08e839c844 Mon Sep 17 00:00:00 2001
From: Ivan Grokhotkov <ivan@espressif.com>
Date: Thu, 25 Aug 2016 12:48:10 +0800
Subject: [PATCH] ssl: disable default cert, enable cert chain verification

---
 ssl/config.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ssl/config.h b/ssl/config.h
index c1764e5ab..8b90bb09c 100644
--- a/ssl/config.h
+++ b/ssl/config.h
@@ -26,14 +26,14 @@
  * SSL Library
  */
 #undef CONFIG_SSL_SERVER_ONLY
-#undef CONFIG_SSL_CERT_VERIFICATION
+#define CONFIG_SSL_CERT_VERIFICATION
 #undef CONFIG_SSL_ENABLE_CLIENT
 #define CONFIG_SSL_FULL_MODE 1
 #undef CONFIG_SSL_SKELETON_MODE
 #undef CONFIG_SSL_PROT_LOW
 #define CONFIG_SSL_PROT_MEDIUM 1
 #undef CONFIG_SSL_PROT_HIGH
-#define CONFIG_SSL_USE_DEFAULT_KEY
+#undef CONFIG_SSL_USE_DEFAULT_KEY
 #define CONFIG_SSL_PRIVATE_KEY_LOCATION ""
 #define CONFIG_SSL_PRIVATE_KEY_PASSWORD ""
 #define CONFIG_SSL_X509_CERT_LOCATION ""