fix: Force validate when using the default crt bundle

This commit is contained in:
Michael Stoll
2025-03-03 18:10:54 +01:00
committed by Kapil Gupta
parent 8144ed8599
commit 4470cf7b49

View File

@ -537,6 +537,7 @@ static int set_client_config(const struct tls_connection_params *cfg, tls_contex
#ifdef CONFIG_MBEDTLS_CERTIFICATE_BUNDLE
if (cfg->flags & TLS_CONN_USE_DEFAULT_CERT_BUNDLE) {
wpa_printf(MSG_INFO, "Using default cert bundle");
mbedtls_ssl_conf_authmode(&tls->conf, MBEDTLS_SSL_VERIFY_REQUIRED);
if (esp_crt_bundle_attach_fn) {
ret = (*esp_crt_bundle_attach_fn)(&tls->conf);
}