From 930b1de678e1c758155aca94ecbdafd8188d1647 Mon Sep 17 00:00:00 2001
From: eric <eric@openbsd.org>
Date: Wed, 10 Mar 2021 17:25:59 +0000
Subject: [PATCH] do not request client certificate unless required

issue hit by florian@
diff by jsing@

ok tb@
---
 usr.sbin/smtpd/smtp.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/usr.sbin/smtpd/smtp.c b/usr.sbin/smtpd/smtp.c
index 171025d0216..5ca11adb870 100644
--- a/usr.sbin/smtpd/smtp.c
+++ b/usr.sbin/smtpd/smtp.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: smtp.c,v 1.167 2021/03/05 12:37:32 eric Exp $	*/
+/*	$OpenBSD: smtp.c,v 1.168 2021/03/10 17:25:59 eric Exp $	*/
 
 /*
  * Copyright (c) 2008 Gilles Chehade <gilles@poolp.org>
@@ -215,8 +215,6 @@ smtp_setup_listener_tls(struct listener *l)
 
 	if (l->flags & F_TLS_VERIFY)
 		tls_config_verify_client(config);
-	else
-		tls_config_verify_client_optional(config);
 
 	l->tls = tls_server();
 	if (l->tls == NULL)
-- 
2.20.1