moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-21 23:58:49 -05:00
Code Issues Releases Wiki Activity

Blah, revert my removal of the extra check since the problem is there for real.

Browse Source 
Archived thread of the help-gnutls mailing list regarding this problem:

http://lists.gnu.org/archive/html/help-gnutls/2005-04/msg00000.html

(and I _am_ sorry for my confused behaviour on this problem.)
This commit is contained in:
Daniel Stenberg 2005-04-09 22:33:14 +00:00
parent 80fe93bc33
commit f09e479fd6
1 changed files with 19 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
lib/gtls.c
View File

@ -149,13 +149,25 @@ Curl_gtls_connect(struct connectdata *conn,
return CURLE_SSL_CONNECT_ERROR; return CURLE_SSL_CONNECT_ERROR;
} }
/* set the trusted CA cert bundle file */ if(data->set.ssl.CAfile) {
rc = gnutls_certificate_set_x509_trust_file(conn->ssl[sockindex].cred, /* set the trusted CA cert bundle file */
data->set.ssl.CAfile,
GNUTLS_X509_FMT_PEM); /*
if(rc) { * Unfortunately, if a file name is set here and this function fails for
infof(data, "error reading the ca cert file %s", * whatever reason (missing file, bad file, etc), gnutls will no longer
data->set.ssl.CAfile); * handshake properly but it just loops forever. Therefore, we must return
* error here if we get an error when setting the CA cert file name.
*
* (Question/report posted to the help-gnutls mailing list, April 8 2005)
*/
rc = gnutls_certificate_set_x509_trust_file(conn->ssl[sockindex].cred,
data->set.ssl.CAfile,
GNUTLS_X509_FMT_PEM);
if(rc) {
failf(data, "error reading the ca cert file %s",
data->set.ssl.CAfile);
return CURLE_SSL_CACERT;
}
} }
/* Initialize TLS session as a client */ /* Initialize TLS session as a client */