changeset 22020:f08ffc29981c

passdb-imap: Make sure ssl verification is possible with current settings
author Aki Tuomi <aki.tuomi@dovecot.fi>
date Mon, 08 May 2017 12:24:52 +0300
parents d968b963d3aa
children 06d37092bc08
files src/auth/passdb-imap.c
diffstat 1 files changed, 5 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/src/auth/passdb-imap.c	Mon May 08 12:24:21 2017 +0300
+++ b/src/auth/passdb-imap.c	Mon May 08 12:24:52 2017 +0300
@@ -187,6 +187,11 @@
 		}
 	}
 
+	if (module->set.ssl_verify == TRUE && module->set.ssl_mode != IMAPC_CLIENT_SSL_MODE_NONE ) {
+		if (module->set.ssl_ca_dir == NULL && module->set.ssl_ca_file == NULL)
+			i_fatal("passdb imap: Cannot verify certificate without ssl_ca_dir or ssl_ca_file setting");
+	}
+
 	if (module->set.host == NULL)
 		i_fatal("passdb imap: Missing host parameter");