aboutsummaryrefslogtreecommitdiff
path: root/ssl.c
diff options
context:
space:
mode:
Diffstat (limited to 'ssl.c')
-rw-r--r--ssl.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/ssl.c b/ssl.c
index d882c94..e6953db 100644
--- a/ssl.c
+++ b/ssl.c
@@ -766,7 +766,10 @@ verify_callback (int preverify_ok, X509_STORE_CTX * ctx)
/* warn if cert chain is too deep */
if (ctx->error_depth >= max_depth)
- msg (M_WARN, "TLS Warning: Convoluted certificate chain detected with depth [%d] greater than %d", ctx->error_depth, max_depth);
+ {
+ msg (D_TLS_ERRORS, "TLS Error: Convoluted certificate chain detected with depth [%d] greater than %d", ctx->error_depth, max_depth);
+ goto err; /* Reject connection */
+ }
/* save common name in session object */
if (ctx->error_depth == 0)