src/crypto/tls_openssl.c

1179 static int tls_verify_cb(int preverify_ok, X509_STORE_CTX *x509_ctx)
1202 	if (!preverify_ok && !conn->ca_cert_verify)
1203 		preverify_ok = 1;
1204 	if (!preverify_ok && depth > 0 && conn->server_cert_only)
1205 		preverify_ok = 1;
1206 	if (!preverify_ok && (conn->flags & TLS_CONN_DISABLE_TIME_CHECKS) &&
1211 		preverify_ok = 1;
1217 	if (preverify_ok && depth == 0 && conn->server_cert_only) {
1223 			preverify_ok = 0;
1234 				preverify_ok = 0;
1241 	if (!preverify_ok) {
1247 		return preverify_ok;
1250 	wpa_printf(MSG_DEBUG, "TLS: tls_verify_cb - preverify_ok=%d "
1252 		   preverify_ok, err, err_str,
1257 		preverify_ok = 0;
1265 		preverify_ok = 0;
1272 	if (conn->cert_probe && preverify_ok && depth == 0) {
1275 		preverify_ok = 0;
1281 	if (preverify_ok && tls_global->event_cb != NULL)
1285 	return preverify_ok;