diff options
| -rw-r--r-- | smtpd/lka.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/smtpd/lka.c b/smtpd/lka.c index 31b7176b..b621e10c 100644 --- a/smtpd/lka.c +++ b/smtpd/lka.c @@ -689,7 +689,10 @@ lka_certificate_verify_resume(enum imsg_type type, struct ca_vrfy_req_msg *req) if (req->fallback) sca = dict_get(env->sc_ca_dict, "*"); cafile = sca ? sca->ca_cert_file : CA_FILE; - if (sca == NULL || ! lka_X509_verify(req, cafile, NULL)) + + if (sca == NULL && !req->fallback) + resp.status = CA_FAIL; + else if (! lka_X509_verify(req, cafile, NULL)) resp.status = CA_FAIL; else resp.status = CA_OK; |