Skip to content

Commit 017a1aa

Browse files
committed
feature: set default client cert verify depth to 1
1 parent 8eb9ab9 commit 017a1aa

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

src/ngx_http_lua_ssl_certby.c

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1345,6 +1345,9 @@ ngx_http_lua_ffi_ssl_verify_client(ngx_http_request_t *r, void *ca_certs,
13451345
sscf = ngx_http_get_module_srv_conf(r, ngx_http_ssl_module);
13461346
if (sscf != NULL) {
13471347
depth = sscf->verify_depth;
1348+
} else {
1349+
/* same as the default value of ssl_verify_depth */
1350+
depth = 1;
13481351
}
13491352
}
13501353
SSL_set_verify_depth(ssl_conn, depth);

0 commit comments

Comments
 (0)