Update listener.go

bharath-b23 · Feb 28, 2018 · e76f498 · e76f498
1 parent 82f1694
commit e76f498
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/command/server/listener.go b/command/server/listener.go
@@ -161,7 +161,12 @@ func listenerWrapTLS(
 		if disableClientCerts && requireVerifyCerts {
 			return nil, nil, nil, fmt.Errorf("'tls_disable_client_certs' and 'tls_require_and_verify_client_cert' are mutually exclusive")
 		}
-		tlsConf.ClientAuth = tls.NoClientCert
+		if disableClientCerts {
+			tlsConf.ClientAuth = tls.NoClientCert
+		}
+		if !disableClientCerts {
+			tlsConf.ClientAuth = tls.VerifyClientCertIfGiven
+		}
 	}
 
 	ln = tls.NewListener(ln, tlsConf)