From 0c583ac9b55fef052011622c9ef606cd3ebd602e Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 16 Oct 2026 18:15:10 +0000 Subject: [PATCH] Drop no-op mbedtls_ssl_conf_verify reset in set_verify_callback Co-Authored-By: Claude Sonnet 5.5 Claude-Session: https://claude.ai/code/session_013wxevjmRqzpy8qDAD3vdwr --- httplib.h | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/httplib.h b/httplib.h index dcc43e3a..d9a1c2aa 100644 --- a/httplib.h +++ b/httplib.h @@ -21603,11 +21603,9 @@ inline bool set_verify_callback(ctx_t ctx, VerifyCallback callback) { if (mbed_ctx->has_verify_callback) { // Set OPTIONAL mode to ensure callback is called even when verification // is disabled (matching OpenSSL behavior where SSL_VERIFY_PEER is set). - // The callback itself is wired per session in create_session(), which - // passes the session so mbedtls_verify_callback() can reach this context. + // The callback itself is wired per session in create_session(). mbedtls_ssl_conf_authmode(&mbed_ctx->conf, MBEDTLS_SSL_VERIFY_OPTIONAL); } - mbedtls_ssl_conf_verify(&mbed_ctx->conf, nullptr, nullptr); return true; }