X-Git-Url: https://ruderich.org/simon/gitweb/?p=tlsproxy%2Ftlsproxy.git;a=blobdiff_plain;f=src%2Fverify.c;h=7031c28d85752e2f3c398d94fa057b9a35dacc9a;hp=f68d1bb771a63526f93fba00623fa30061b69e9e;hb=8c4ae426c578d53c7afcbcbc178c96a7da3614c2;hpb=8f9459308e695a30874a6cdcd53aa26441b87131

diff --git a/src/verify.c b/src/verify.c
index f68d1bb..7031c28 100644
--- a/src/verify.c
+++ b/src/verify.c
@@ -79,7 +79,8 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) {
             gnutls_strerror(result));
         return -1;
     }
-    /* Definitely an invalid certificate, abort. */
+    /* Definitely an invalid certificate, abort. We don't perform any CA
+     * verification so don't check for GNUTLS_CERT_INVALID. */
     if (status & GNUTLS_CERT_REVOKED
             || status & GNUTLS_CERT_SIGNER_NOT_CA
             || status & GNUTLS_CERT_INSECURE_ALGORITHM