From b53657b767ce2465b0ec1946bdf81e74b1ba43a1 Mon Sep 17 00:00:00 2001
From: Andris Raugulis <moo@arthepsy.eu>
Date: Mon, 25 May 2020 19:52:18 +0000
Subject: [PATCH] Do not use client certificate, if not specified.

---
 gp-okta.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/gp-okta.py b/gp-okta.py
index 778a827..4683b0f 100755
--- a/gp-okta.py
+++ b/gp-okta.py
@@ -215,10 +215,11 @@ class Conf(object):
 		if name not in ['okta', 'portal', 'gateway']:
 			raise Exception('unknonw session: {0}'.format(name))
 		s = self._session
+		s.cert = None
 		if name == 'okta':
 			if self.okta_cli_cert:
 				s.cert = self.okta_cli_cert
-		if self.vpn_cli_cert:
+		elif self.vpn_cli_cert:
 			s.cert = self.vpn_cli_cert
 		return s