New subject: [Issue 10517] mbedTLS doesn't verify certificate in reqcert try mode

2 Jun 2026


      https://bugs.openldap.org/show_bug.cgi?id=10517
Issue ID: 10517
           Summary: mbedTLS doesn't verify certificate in reqcert try mode
           Product: OpenLDAP
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: libraries
          Assignee: bugs@openldap.org
          Reporter: ondra@mistotebe.net
  Target Milestone: ---
When setting the authmode to OPTIONAL, mbedTLS documentation[0] says that it's
the user's responsibility to check the verification result if they care.
`reqcert try` does care, but mbedtls_ssl_get_verify_result is never called in
that case and so an invalid cert is not detected (easy to test by changing line
204 in test067).
[0].
https://os.mbed.com/teams/sandbox/code/mbedtls/docs/tip/ssl_8h.html#a5695285...
-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 10517] New: mbedTLS doesn't verify certificate in reqcert try mode