From 7790cde1437c76129d8fed29f1b27c2201604648 Mon Sep 17 00:00:00 2001
From: stephb9959 <stephane.bourque@gmail.com>
Date: Thu, 14 Sep 2023 15:30:13 -0700
Subject: [PATCH] https://telecominfraproject.atlassian.net/browse/WIFI-7831

Signed-off-by: stephb9959 <stephane.bourque@gmail.com>
---
 src/RADSEC_server.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/RADSEC_server.h b/src/RADSEC_server.h
index 37d226a6..38ba7a21 100644
--- a/src/RADSEC_server.h
+++ b/src/RADSEC_server.h
@@ -248,6 +248,7 @@ namespace OpenWifi {
 				SecureContext->addCertificateAuthority(Poco::Crypto::X509Certificate(OpenRoamingRootCertFile_.path()));
 				SecureContext->addChainCertificate(Poco::Crypto::X509Certificate(Intermediate0.path()));
 				SecureContext->addChainCertificate(Poco::Crypto::X509Certificate(Intermediate1.path()));
+				SecureContext->enableExtendedCertificateVerification(false);
 
 				Socket_ = std::make_unique<Poco::Net::SecureStreamSocket>(SecureContext);
 				DBGLINE
@@ -262,7 +263,6 @@ namespace OpenWifi {
 					DBGLINE
 					Socket_->completeHandshake();
 					DBGLINE
-					SecureContext->enableExtendedCertificateVerification(false);
 					DBGLINE
 
 					if (!Server_.allowSelfSigned) {