m_ssl_mbedtls Apply dummy CA workaround for client context

[user/henk/code/inspircd.git] / src / modules / extra / m_ssl_mbedtls.cpp

diff --git a/src/modules/extra/m_ssl_mbedtls.cpp b/src/modules/extra/m_ssl_mbedtls.cpp
index a465d06eef1d9c449313ac5ca3ad051413353109..ffe0a71b8fd3540fea3e91df55a65b6a230fba63 100644 (file)
--- a/src/modules/extra/m_ssl_mbedtls.cpp
+++ b/src/modules/extra/m_ssl_mbedtls.cpp
@@ -420,6 +420,7 @@ namespace mbedTLS
                        }
 
                        clientctx.SetOptionalVerifyCert();
+                       clientctx.SetCA(cacerts, crl);                  
                        // The default for servers is to not request a client certificate from the peer
                        if (requestclientcert)
                        {