From: eric <eric@openbsd.org>
Date: Wed, 10 Mar 2021 17:25:59 +0000 (+0000)
Subject: do not request client certificate unless required
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=930b1de678e1c758155aca94ecbdafd8188d1647;p=openbsd

do not request client certificate unless required

issue hit by florian@
diff by jsing@

ok tb@
---

diff --git a/usr.sbin/smtpd/smtp.c b/usr.sbin/smtpd/smtp.c
index 171025d0216..5ca11adb870 100644
--- a/usr.sbin/smtpd/smtp.c
+++ b/usr.sbin/smtpd/smtp.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: smtp.c,v 1.167 2021/03/05 12:37:32 eric Exp $	*/
+/*	$OpenBSD: smtp.c,v 1.168 2021/03/10 17:25:59 eric Exp $	*/
 
 /*
  * Copyright (c) 2008 Gilles Chehade <gilles@poolp.org>
@@ -215,8 +215,6 @@ smtp_setup_listener_tls(struct listener *l)
 
 	if (l->flags & F_TLS_VERIFY)
 		tls_config_verify_client(config);
-	else
-		tls_config_verify_client_optional(config);
 
 	l->tls = tls_server();
 	if (l->tls == NULL)