1
0
mirror of synced 2026-10-24 00:28:57 +03:00

Drop no-op mbedtls_ssl_conf_verify reset in set_verify_callback

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013wxevjmRqzpy8qDAD3vdwr
This commit is contained in:
Claude
2026-10-16 18:15:10 +00:00
parent e225d1876b
commit 0c583ac9b5

View File

@@ -21603,11 +21603,9 @@ inline bool set_verify_callback(ctx_t ctx, VerifyCallback callback) {
if (mbed_ctx->has_verify_callback) {
// Set OPTIONAL mode to ensure callback is called even when verification
// is disabled (matching OpenSSL behavior where SSL_VERIFY_PEER is set).
// The callback itself is wired per session in create_session(), which
// passes the session so mbedtls_verify_callback() can reach this context.
// The callback itself is wired per session in create_session().
mbedtls_ssl_conf_authmode(&mbed_ctx->conf, MBEDTLS_SSL_VERIFY_OPTIONAL);
}
mbedtls_ssl_conf_verify(&mbed_ctx->conf, nullptr, nullptr);
return true;
}