aniani/elinks
1
0
Fork 0
mirror of https://github.com/rkd77/elinks.git synced 2025-01-03 14:57:44 -05:00
Code

1022: Fixes issue with mbank.

Browse Source 
New patch, fixes issue with mbank's certificate verification.
This commit is contained in:
Witold Filipczyk 2008-07-27 14:50:05 +02:00 committed by Kalle Olavi Niemitalo
parent a83ff1f565
commit 2e1983ce93
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
src/network/ssl/ssl.c
View File

@ -9,6 +9,7 @@
#include <openssl/rand.h> #include <openssl/rand.h>
#elif defined(CONFIG_GNUTLS) #elif defined(CONFIG_GNUTLS)
#include <gnutls/gnutls.h> #include <gnutls/gnutls.h>
#include <gnutls/x509.h>
#else #else
#error "Huh?! You have SSL enabled, but not OPENSSL nor GNUTLS!! And then you want exactly *what* from me?" #error "Huh?! You have SSL enabled, but not OPENSSL nor GNUTLS!! And then you want exactly *what* from me?"
#endif #endif
@ -122,6 +123,7 @@ static void
init_gnutls(struct module *module) init_gnutls(struct module *module)
{ {
int ret = gnutls_global_init(); int ret = gnutls_global_init();
unsigned char *ca_file = get_opt_str("connection.ssl.trusted_ca_file");
if (ret < 0) if (ret < 0)
INTERNAL("GNUTLS init failed: %s", gnutls_strerror(ret)); INTERNAL("GNUTLS init failed: %s", gnutls_strerror(ret));
@ -135,8 +137,16 @@ init_gnutls(struct module *module)
if (ret < 0) if (ret < 0)
INTERNAL("GNUTLS X509 credentials alloc failed: %s", INTERNAL("GNUTLS X509 credentials alloc failed: %s",
gnutls_strerror(ret)); gnutls_strerror(ret));
/* Here, we should load certificate files etc. */ /* Here, we should load certificate files etc. */
if (*ca_file) {
/* FIXME: check returned values. --witekfl */
gnutls_certificate_set_x509_trust_file(xcred, ca_file,
GNUTLS_X509_FMT_PEM);
gnutls_certificate_set_verify_flags(xcred,
GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT);
}
} }
static void static void
@ -152,7 +162,10 @@ static struct option_info gnutls_options[] = {
"cert_verify", 0, 0, "cert_verify", 0, 0,
N_("Verify the peer's SSL certificate. Note that this\n" N_("Verify the peer's SSL certificate. Note that this\n"
"probably doesn't work properly at all with GnuTLS.")), "probably doesn't work properly at all with GnuTLS.")),
/* FIXME: Better description. */
INIT_OPT_STRING("connection.ssl", N_("Trusted CA file"),
"trusted_ca_file", 0, "/etc/ssl/certs/ca-certificates.crt",
N_("The location of the trusted CA file.")),
NULL_OPTION_INFO, NULL_OPTION_INFO,
}; };