ssl: server-side SSLContext wrongly requires a client certificate (all ports) #26

Upstream target: adafruit/circuitpython — shared-module/ssl/SSLContext.c

A server-side SSLContext demands a client certificate. Wrapping an accepted socket for a TLS server fails with mbedTLS -0x7480 unless a client cert is loaded, which a server has no reason to have. CPython's ssl does not require this: verify_mode defaults to CERT_NONE for a server context, and a client certificate is optional.

Affects all ports, not just zephyr-cp — it is in shared-module, and it makes socketpool + ssl unusable as a TLS server anywhere.

Fixed in this stack by cbcfeec077 ("ssl: do not demand a client certificate from a server-side context"), carried on the branch behind #21. Worth extracting as a standalone upstream PR since it is port-independent and small.

Filed here so it can be raised upstream against adafruit/circuitpython; not yet submitted.