On the client side, my application accepts the server's certificate in case of the client certificate being signed by this server cert. Is this correct or may it be dangerous? Is it better to ask a user to confirm security exception every time (e.g. like browsers)?
To clarify the question:
What I have:
[server-cert][CA cert] (server chain);
[client-cert][server-cert'] (client chain).
What the application does: if
server-cert == server-cert', then the client trusts the server. I'm asking if this is correct behavior or it can cause flaws.