Drop no-op mbedtls_ssl_conf_verify reset in set_verify_callback

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013wxevjmRqzpy8qDAD3vdwr
This commit is contained in:
Claude committed 2026-10-16 18:15:10 +00:00
1 parent e225d1876b
commit 0c583ac9b5
1 file changed
+1 -3
+1 -3
View File
@@ -21603,11 +21603,9 @@ inline bool set_verify_callback(ctx_t ctx, VerifyCallback callback) {
if (mbed_ctx->has_verify_callback) {
// Set OPTIONAL mode to ensure callback is called even when verification
// is disabled (matching OpenSSL behavior where SSL_VERIFY_PEER is set).
// The callback itself is wired per session in create_session(), which
// passes the session so mbedtls_verify_callback() can reach this context.
// The callback itself is wired per session in create_session().
mbedtls_ssl_conf_authmode(&mbed_ctx->conf, MBEDTLS_SSL_VERIFY_OPTIONAL);
}
mbedtls_ssl_conf_verify(&mbed_ctx->conf, nullptr, nullptr);
return true;
}