[PATCH] add gnutls_certificate_find_issuer

Nikos Mavrogiannopoulos nmav at gnutls.org
Wed Feb 20 20:30:32 CET 2008


Joe Orton wrote:
> On Wed, Feb 20, 2008 at 02:52:54PM +0200, Nikos Mavrogiannopoulos wrote:
>> On Feb 19, 2008 11:33 PM, Joe Orton <jorton at redhat.com> wrote:
>>> With respect to exposing structure contents directly, I would generally
>>> advocate exposing functions instead where possible, since structures
>>> bring restrictive ABI constraints.
>> Indeed but I'm thinking that someone might do more than check a single
>> issuer. He might want to print the whole imported list. In that case
>> I'd use something like gnutls_certificate_export_x509_cas() that will
>> return the whole list of issuers, and your check can be done at the
>> application level. Would something like this suit you?
> 
> Yes, that certainly sounds fine too.

I've done a commit at:
http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=a259726327bf193e9c83f7473d517502ba8a879b

However these functions will restrict us on a rewrite of 
certificate_credentials... but it doesn't seem likely.

regards,
Nikos





More information about the Gnutls-devel mailing list