espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-08-03 20:54:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: Force validate when using the default crt bundle

Browse Source
This commit is contained in:
Michael Stoll
2025-03-03 18:10:54 +01:00
committed by Kapil Gupta
parent 4912a70470
commit 4b3a44face
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
components/wpa_supplicant/esp_supplicant/src/crypto/tls_mbedtls.c
View File

@@ -543,6 +543,7 @@ static int set_client_config(const struct tls_connection_params *cfg, tls_contex
#ifdef CONFIG_MBEDTLS_CERTIFICATE_BUNDLE #ifdef CONFIG_MBEDTLS_CERTIFICATE_BUNDLE
if (cfg->flags & TLS_CONN_USE_DEFAULT_CERT_BUNDLE) { if (cfg->flags & TLS_CONN_USE_DEFAULT_CERT_BUNDLE) {
mbedtls_ssl_conf_authmode(&tls->conf, MBEDTLS_SSL_VERIFY_REQUIRED);
wpa_printf(MSG_INFO, "Using default cert bundle"); wpa_printf(MSG_INFO, "Using default cert bundle");
if (esp_crt_bundle_attach_fn) { if (esp_crt_bundle_attach_fn) {
ret = (*esp_crt_bundle_attach_fn)(&tls->conf); ret = (*esp_crt_bundle_attach_fn)(&tls->conf);