# HG changeset patch
# User Aki Tuomi <aki.tuomi@dovecot.fi>
# Date 1494235492 -10800
# Node ID f08ffc29981cbcac9104f1942b7f0d3c21748b9b
# Parent  d968b963d3aa882335ba2a3d58a45bfc942a3af4
passdb-imap: Make sure ssl verification is possible with current settings

diff -r d968b963d3aa -r f08ffc29981c src/auth/passdb-imap.c
--- a/src/auth/passdb-imap.c	Mon May 08 12:24:21 2017 +0300
+++ b/src/auth/passdb-imap.c	Mon May 08 12:24:52 2017 +0300
@@ -187,6 +187,11 @@
 		}
 	}
 
+	if (module->set.ssl_verify == TRUE && module->set.ssl_mode != IMAPC_CLIENT_SSL_MODE_NONE ) {
+		if (module->set.ssl_ca_dir == NULL && module->set.ssl_ca_file == NULL)
+			i_fatal("passdb imap: Cannot verify certificate without ssl_ca_dir or ssl_ca_file setting");
+	}
+
 	if (module->set.host == NULL)
 		i_fatal("passdb imap: Missing host parameter");