ignore validation failures with NO_CERTIFICATE_VALIDATION (#1728)

microsoft · Jul 28, 2021 · 8f74f85 · 8f74f85
1 parent d617d1e
commit 8f74f85
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/platform/tls_schannel.c b/src/platform/tls_schannel.c
@@ -1976,8 +1976,9 @@ CxPlatTlsWriteDataToSchannel(
                 }
             }
             SecPkgContext_CertificateValidationResult CertValidationResult = {0,0};
-            if (TlsContext->SecConfig->Flags & QUIC_CREDENTIAL_FLAG_REQUIRE_CLIENT_AUTHENTICATION ||
-                TlsContext->SecConfig->Flags & QUIC_CREDENTIAL_FLAG_DEFER_CERTIFICATE_VALIDATION) {
+            if (!(TlsContext->SecConfig->Flags & QUIC_CREDENTIAL_FLAG_NO_CERTIFICATE_VALIDATION) &&
+                (TlsContext->SecConfig->Flags & QUIC_CREDENTIAL_FLAG_REQUIRE_CLIENT_AUTHENTICATION ||
+                TlsContext->SecConfig->Flags & QUIC_CREDENTIAL_FLAG_DEFER_CERTIFICATE_VALIDATION)) {
                 //
                 // Collect the client cert validation result
                 //