diff --git a/server/core/ssl.cc b/server/core/ssl.cc index 010729d6c..94951c08d 100644 --- a/server/core/ssl.cc +++ b/server/core/ssl.cc @@ -371,7 +371,7 @@ bool SSLContext::init() /* Set to require peer (client) certificate verification */ if (m_cfg.verify_peer) { - SSL_CTX_set_verify(m_ctx, SSL_VERIFY_PEER, NULL); + SSL_CTX_set_verify(m_ctx, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, NULL); } /* Set the verification depth */