mirror of
https://github.com/yhirose/cpp-httplib.git
synced 2026-10-27 05:51:30 +00:00
With built-in verification on, a server certificate verifier returning true made Mbed TLS accept a certificate its own check had rejected, such as a self-signed one, while OpenSSL and wolfSSL still failed with SSLServerVerification. On a client, keep the flags of Mbed TLS's own verification, so the verifier is an additional check as on the other backends. With verification off, the verifier is still the only check. A server still clears them: there all three backends let an accepting callback admit a client certificate.