GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-10 16:57:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

when multiple auth methods are set, do not 'require' a certificate

Browse Source
This commit is contained in:
Nikos Mavrogiannopoulos
2015-04-09 11:42:13 +02:00
parent 99dd4a6e03
commit 0ee9d946a5
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/config.c
View File

@@ -989,14 +989,14 @@ static void check_cfg(struct perm_cfg_st *perm_config)
exit(1);
}
if (perm_config->auth[0].type & AUTH_TYPE_CERTIFICATE) {
if (perm_config->auth[0].type & AUTH_TYPE_CERTIFICATE && perm_config->auth_methods == 1) {
if (perm_config->config->cisco_client_compat == 0)
perm_config->config->cert_req = GNUTLS_CERT_REQUIRE;
else
perm_config->config->cert_req = GNUTLS_CERT_REQUEST;
} else {
unsigned i;
for (i=1;i<perm_config->auth_methods;i++) {
for (i=0;i<perm_config->auth_methods;i++) {
if (perm_config->auth[i].type & AUTH_TYPE_CERTIFICATE) {
perm_config->config->cert_req = GNUTLS_CERT_REQUEST;
break;