Changeset 542:0b6cee362f5d in freeDiameter for freeDiameter/cnxctx.c

Timestamp:

Sep 13, 2010, 6:39:22 PM (14 years ago)

Author:

Sebastien Decugis <sdecugis@nict.go.jp>

Branch:

default

Phase:

public

Message:

Enforce validation of local certificate upon daemon start.

File:

• freeDiameter/cnxctx.c (modified) (2 diffs)

freeDiameter/cnxctx.c

@@ -1176 +1176 @@
                 CHECK_GNUTLS_DO( gnutls_x509_crt_import (cert, &cert_list[i], GNUTLS_X509_FMT_DER), return EINVAL);
                 
+                /* When gnutls 2.10.1 is around, we should use gnutls_certificate_set_verify_function */
+                
                 GNUTLS_TRACE( deadline = gnutls_x509_crt_get_expiration_time(cert) );
                 if ((deadline != (time_t)-1) && (deadline < now)) {
@@ -1253 +1255 @@
         {
                 int ret;
+                
+                /* When gnutls 2.10.1 is around, we should use gnutls_certificate_set_verify_function */
+                
                 CHECK_GNUTLS_DO( ret = gnutls_handshake(conn->cc_tls_para.session),
                         {