MXS-1019: Make peer certificate verification configurable
The new `ssl_verify_peer_certificate` parameter controls whether the peer certificate is verified. This allows self-signed certificates to be properly used with MaxScale.
This commit is contained in:
@ -712,6 +712,7 @@ createInstance(SERVICE *service, char **options)
|
||||
ssl_cfg->ssl_init_done = false;
|
||||
ssl_cfg->ssl_method_type = SERVICE_SSL_TLS_MAX;
|
||||
ssl_cfg->ssl_cert_verify_depth = 9;
|
||||
ssl_cfg->ssl_verify_peer_certificate = true;
|
||||
|
||||
/** Set SSL pointer in in server struct */
|
||||
server->server_ssl = ssl_cfg;
|
||||
|
Reference in New Issue
Block a user