From e81f068e4b366fb5953da62dd67fd9d21f6ce492 Mon Sep 17 00:00:00 2001
From: Unbit <info@unbit.it>
Date: Wed, 8 Jan 2014 07:55:46 +0100
Subject: [PATCH] a fix from nginx for SNI client authentication

---
 core/ssl.c | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/core/ssl.c b/core/ssl.c
index 8f312383..fb16858a 100644
--- a/core/ssl.c
+++ b/core/ssl.c
@@ -99,7 +99,15 @@ static int uwsgi_sni_cb(SSL *ssl, int *ad, void *arg) {
         struct uwsgi_string_list *usl = uwsgi.sni;
         while(usl) {
                 if (!uwsgi_strncmp(usl->value, usl->len, (char *)servername, servername_len)) {
-                        SSL_set_SSL_CTX(ssl, usl->custom_ptr);
+                        SSL_set_SSL_CTX(ssl, (SSL_CTX *) usl->custom_ptr);
+			// the following steps are taken from nginx
+			SSL_set_verify(ssl, SSL_CTX_get_verify_mode((SSL_CTX *)usl->custom_ptr),
+				 SSL_CTX_get_verify_callback((SSL_CTX *)usl->custom_ptr));
+			SSL_set_verify_depth(ssl, SSL_CTX_get_verify_depth((SSL_CTX *)usl->custom_ptr));	
+#ifdef SSL_CTRL_CLEAR_OPTIONS
+			SSL_clear_options(ssl, SSL_get_options(ssl) & ~SSL_CTX_get_options((SSL_CTX *)usl->custom_ptr));
+#endif
+			SSL_set_options(ssl, SSL_CTX_get_options((SSL_CTX *)usl->custom_ptr));
                         return SSL_TLSEXT_ERR_OK;
                 }
                 usl = usl->next;