Only set the verify callback if there's one to set!

diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c
index 38c76a9d13567c8c8115aa1ba5592763eb0e7318..be3acabf3e0377ce40dfbd7d616c57d8d34bd296 100644 (file)
--- a/ssl/ssl_cert.c
+++ b/ssl/ssl_cert.c
@@ -461,7 +461,8 @@ int ssl_verify_cert_chain(SSL *s,STACK_OF(X509) *sk)
 
        X509_STORE_CTX_purpose_inherit(&ctx, i, s->purpose, s->trust);
 
-       X509_STORE_CTX_set_verify_cb(&ctx, s->verify_callback);
+       if (s->verify_callback)
+               X509_STORE_CTX_set_verify_cb(&ctx, s->verify_callback);
 
        if (s->ctx->app_verify_callback != NULL)
                i=s->ctx->app_verify_callback(&ctx); /* should pass app_verify_arg */