diff --git a/warden3/warden_server/warden_server.py b/warden3/warden_server/warden_server.py index 90d1bd1f856492c58d6d9b50728eb083db956895..4c20d0395b462b820dff5163a18b9d72e11d083b 100755 --- a/warden3/warden_server/warden_server.py +++ b/warden3/warden_server/warden_server.py @@ -360,10 +360,11 @@ class X509Authenticator(PlainAuthenticator): def is_verified_by_apache(self, env, args): # Allows correct work while SSLVerifyClient both "optional" and "required" verify = env.get("SSL_CLIENT_VERIFY") - if verify != "SUCCESS": - exception = self.req.error(message="authenticate: certificate verification failed", error=403, args = args, ssl_client_verify=verify, cert=env.get("SSL_CLIENT_CERT")) - exception.log(self.log) - return None + if verify == "SUCCESS": + return True + exception = self.req.error(message="authenticate: certificate verification failed", error=403, args = args, ssl_client_verify=verify, cert=env.get("SSL_CLIENT_CERT")) + exception.log(self.log) + return False def authenticate(self, env, args):