Improving Certificate verification

diff --git a/lib/unitls.c b/lib/unitls.c
index 153c4fa5bd12604116a20c1905f8959e5a5cad87..588c8c3e8e6232690ace1837e104a8c95b685f59 100644 (file)
--- a/lib/unitls.c
+++ b/lib/unitls.c
@@ -165,7 +165,7 @@ _Bool proceed;
 
 done=false;
 mode=SSL_VERIFY_NONE;
-//mode=SSL_VERIFY_PEER;
+mode=SSL_VERIFY_PEER;
 phase=0;
 proceed=true;
 while (proceed==true) {
@@ -355,8 +355,11 @@ while (proceed==true) {
 
       verif=SSL_get_verify_result(tls->ssl);
       switch (verif) {
+        case X509_V_OK  :
+          (void) rou_alert(0,"%s Remote certificate is V_OK",OPEP);
+          break;
         default         :
-          (void) rou_alert(0,"%s, Remote certificate status='%d'",OPEP,verif);
+          (void) rou_alert(0,"%s Remote certificate status='%d'",OPEP,verif);
           break;
         }
       }