Fix client SslStream certificate chain CRL validation. The logic was inverse and CRLs were never checked.

Add a missing dispose in managed client.
This commit is contained in:
Craig Lutgen
2019-08-12 17:34:05 -05:00
parent 4cefa1dfa9
commit d7948afd98
2 changed files with 2 additions and 1 deletions
@@ -252,6 +252,7 @@ namespace MQTTnet.Extensions.ManagedClient
_maintainConnectionTask = null;
}
_messageQueueLock.Dispose();
_mqttClient.Dispose();
}
@@ -86,7 +86,7 @@ namespace MQTTnet.Implementations
var sslStream = new SslStream(networkStream, false, InternalUserCertificateValidationCallback);
_stream = sslStream;
await sslStream.AuthenticateAsClientAsync(_options.Server, LoadCertificates(), _options.TlsOptions.SslProtocol, _options.TlsOptions.IgnoreCertificateRevocationErrors).ConfigureAwait(false);
await sslStream.AuthenticateAsClientAsync(_options.Server, LoadCertificates(), _options.TlsOptions.SslProtocol, !_options.TlsOptions.IgnoreCertificateRevocationErrors).ConfigureAwait(false);
}
else
{