[gnutls-devel] [PATCH 1/2] doc: Correct comment about ignoring certs in the SRP server example

Attila Molnar attilamolnar at hush.com
Mon Jun 16 20:56:03 CEST 2014


>From 79f2b158ce8c809c30772e2a58571717a9f6bfb4 Mon Sep 17 00:00:00 2001
From: Attila Molnar <attilamolnar at hush.com>
Date: Mon, 16 Jun 2014 18:04:10 +0200
Subject: [PATCH 1/2] doc: Correct comment about ignoring certs in the SRP
 server example

Point readers to another example for a way to validate certificates in
both the SRP and the X.509 server example

Signed-off-by: Attila Molnar <attilamolnar at hush.com>
---
 doc/examples/ex-serv-srp.c  | 5 ++++-
 doc/examples/ex-serv-x509.c | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/doc/examples/ex-serv-srp.c b/doc/examples/ex-serv-srp.c
index e241765..9f1f58a 100644
--- a/doc/examples/ex-serv-srp.c
+++ b/doc/examples/ex-serv-srp.c
@@ -99,7 +99,10 @@ int main(void)
                 gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
                                        cert_cred);
 
-                /* request client certificate if any.
+                /* We don't request any certificate from the client.
+                 * If we did we would need to verify it. One way of
+                 * doing that is shown in the "Verifying a certificate"
+                 * example.
                  */
                 gnutls_certificate_server_set_request(session,
                                                       GNUTLS_CERT_IGNORE);
diff --git a/doc/examples/ex-serv-x509.c b/doc/examples/ex-serv-x509.c
index bc5b371..5380d60 100644
--- a/doc/examples/ex-serv-x509.c
+++ b/doc/examples/ex-serv-x509.c
@@ -125,8 +125,11 @@ int main(void)
                 gnutls_priority_set(session, priority_cache);
                 gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE,
                                        x509_cred);
+
                 /* We don't request any certificate from the client.
-                 * If we did we would need to verify it.
+                 * If we did we would need to verify it. One way of
+                 * doing that is shown in the "Verifying a certificate"
+                 * example.
                  */
                 gnutls_certificate_server_set_request(session,
                                                       GNUTLS_CERT_IGNORE);
-- 




More information about the Gnutls-devel mailing list