From 85288fd0b31027e7948180e0e057242e13f15da4 Mon Sep 17 00:00:00 2001
From: Romain DEP <rom1dep@gmail.com>
Date: Sat, 21 Jul 2018 20:27:49 +0200
Subject: add 'verify_certificate' as possible configuration token for policy
 files  This lets the user configure a per-domain certificate validation
 policy

---
 src/network/tcp_socket_handler.cpp | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src/network/tcp_socket_handler.cpp')

diff --git a/src/network/tcp_socket_handler.cpp b/src/network/tcp_socket_handler.cpp
index 642cf03..c6e173d 100644
--- a/src/network/tcp_socket_handler.cpp
+++ b/src/network/tcp_socket_handler.cpp
@@ -332,6 +332,11 @@ void TCPSocketHandler::tls_verify_cert_chain(const std::vector<Botan::X509_Certi
                                              Botan::Usage_Type usage, const std::string& hostname,
                                              const Botan::TLS::Policy& policy)
 {
+  if (!this->policy.verify_certificate_info())
+    {
+      log_debug("Not verifying certificate due to domain policy ");
+      return;
+    }
   log_debug("Checking remote certificate for hostname ", hostname);
   try
     {
-- 
cgit v1.2.3