Browse Source

fix(NetSSL): SecureSocketImpl::peerCertificate() should just return certificate, not verify it

Günter Obiltschnig 1 year ago
parent
commit
68d12fdd52
1 changed files with 3 additions and 8 deletions
  1. 3 8
      NetSSL_OpenSSL/src/SecureSocketImpl.cpp

+ 3 - 8
NetSSL_OpenSSL/src/SecureSocketImpl.cpp

@@ -521,14 +521,9 @@ X509* SecureSocketImpl::peerCertificate() const
 	X509* pCert = nullptr;
 
 	if (_pSSL)
-	{
-		pCert = ::SSL_get_peer_certificate(_pSSL);
-		if (X509_V_OK != SSL_get_verify_result(_pSSL))
-			throw CertificateValidationException("SecureSocketImpl::peerCertificate(): "
-				"Certificate verification error " + Utility::getLastError());
-	}
-
-	return pCert;
+		return ::SSL_get_peer_certificate(_pSSL);
+	else
+		return nullptr;
 }