f320 - add debug warning about using VERIFY_NONE

embhorn · embhorn · commit 07eabeafe609 · 2026-03-19T10:24:41.000-05:00
diff --git a/src/mqtt_socket.c b/src/mqtt_socket.c
@@ -466,6 +466,10 @@ int MqttSocket_Connect(MqttClient *client, const char* host, word16 port,
                 goto exit;
             }
             wolfSSL_CTX_set_verify(client->tls.ctx, WOLFSSL_VERIFY_NONE, 0);
+        #ifdef WOLFMQTT_DEBUG_SOCKET
+            PRINTF("Warning: TLS set to VERIFY_NONE. Use MqttClient_SetTlsCb "
+                "to set peer verification in production");
+        #endif
         }
 
     #ifndef NO_DH

Original file line number	Diff line number	Diff line change
`@@ -466,6 +466,10 @@ int MqttSocket_Connect(MqttClient client, const char host, word16 port,`
`466`	`466`	`goto exit;`
`467`	`467`	`}`
`468`	`468`	`wolfSSL_CTX_set_verify(client->tls.ctx, WOLFSSL_VERIFY_NONE, 0);`
	`469`	`+ #ifdef WOLFMQTT_DEBUG_SOCKET`
	`470`	`+ PRINTF("Warning: TLS set to VERIFY_NONE. Use MqttClient_SetTlsCb "`
	`471`	`+ "to set peer verification in production");`
	`472`	`+ #endif`
`469`	`473`	`}`
`470`	`474`
`471`	`475`	`#ifndef NO_DH`