diff --git a/miniserv.pl b/miniserv.pl index 065805da0..a5e3f2a67 100755 --- a/miniserv.pl +++ b/miniserv.pl @@ -1721,7 +1721,8 @@ if ($header{'user-agent'} =~ /webmin/i || # Check for SSL authentication my $trust_ssl = $config{'trust_real_ip'} && !$config{'no_trust_ssl'}; if ($use_ssl && $verified_client || - $trust_ssl && $header{'x-ssl-client-dn'}) { + $trust_ssl && $header{'x-ssl-client-dn'} && + $header{'x-ssl-client-verifiy'} !~ /^(failed|none)/i) { if ($use_ssl && $verified_client) { $peername = Net::SSLeay::X509_NAME_oneline( Net::SSLeay::X509_get_subject_name(