summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorUnbit <info@unbit.it>2018-02-10 08:51:31 +0100
committerUnbit <info@unbit.it>2018-02-10 08:55:07 +0100
commitcd19c480691a2a7c4d1f42d76f2b6563e25fc595 (patch)
tree363e25cafa9e9d3a2a109e1ced22c48e5ede2329
parent2f93741558655fdbae325281f4fb12783e7eae27 (diff)
downloaduwsgi-cd19c480691a2a7c4d1f42d76f2b6563e25fc595.tar.gz
fixed ssl_verify-depth
-rw-r--r--core/init.c1
-rwxr-xr-xcore/uwsgi.c2
2 files changed, 2 insertions, 1 deletions
diff --git a/core/init.c b/core/init.c
index aefffd01..b0660c8f 100644
--- a/core/init.c
+++ b/core/init.c
@@ -152,6 +152,7 @@ void uwsgi_init_default() {
// 1 day of tolerance
uwsgi.subscriptions_sign_check_tolerance = 3600 * 24;
uwsgi.ssl_sessions_timeout = 300;
+ uwsgi.ssl_verify_depth = 1;
#endif
uwsgi.alarm_freq = 3;
diff --git a/core/uwsgi.c b/core/uwsgi.c
index e9633ab8..e2d7750a 100755
--- a/core/uwsgi.c
+++ b/core/uwsgi.c
@@ -703,7 +703,7 @@ static struct uwsgi_option uwsgi_base_options[] = {
{"snmp-community", required_argument, 0, "set the snmp community string", uwsgi_opt_snmp_community, NULL, 0},
#ifdef UWSGI_SSL
{"ssl-verbose", no_argument, 0, "be verbose about SSL errors", uwsgi_opt_true, &uwsgi.ssl_verbose, 0},
- {"ssl-verify-depth", optional_argument, 0, "set maximum certificate verification depth", uwsgi_opt_set_int, &uwsgi.ssl_verify_depth, 1},
+ {"ssl-verify-depth", optional_argument, 0, "set maximum certificate verification depth", uwsgi_opt_set_int, &uwsgi.ssl_verify_depth, 0},
#ifdef UWSGI_SSL_SESSION_CACHE
// force master, as ssl sessions caching initialize locking early
{"ssl-sessions-use-cache", optional_argument, 0, "use uWSGI cache for ssl sessions storage", uwsgi_opt_set_str, &uwsgi.ssl_sessions_use_cache, UWSGI_OPT_MASTER},