diff --git a/logsrvd/tls_init.c b/logsrvd/tls_init.c index d7938d100..6a24fcc83 100644 --- a/logsrvd/tls_init.c +++ b/logsrvd/tls_init.c @@ -83,8 +83,9 @@ verify_cert_chain(SSL_CTX *ctx, const char *cert_file) goto done; } -#if !defined(HAVE_WOLFSSL) - if ((ca_store = SSL_CTX_get_cert_store(ctx)) != NULL) + ca_store = SSL_CTX_get_cert_store(ctx); +#ifdef X509_V_FLAG_X509_STRICT + if (ca_store != NULL) X509_STORE_set_flags(ca_store, X509_V_FLAG_X509_STRICT); #endif