Changeset 1c90c18 in mod_gnutls for src/gnutls_hooks.c

Timestamp:

Jun 30, 2009, 2:37:28 PM (11 years ago)

Author:

Nokis Mavrogiannopoulos <nmav@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, msva, proxy-ticket, upstream

Children:

c38a4e9

Parents:

377a900

git-author:

Nikos Mavrogiannopoulos <nmav@…> (06/30/09 14:37:28)

git-committer:

Nokis Mavrogiannopoulos <nmav@…> (06/30/09 14:37:28)

Message:

Applied patch by AlainKnaff? to correctly verify certificates per directory. Patch by AlainKnaff?.
Solves: ​http://issues.outoforder.cc/view.php?id=93

File:

• src/gnutls_hooks.c (modified) (2 diffs)

src/gnutls_hooks.c

@@ -124 +124 @@
 
     gnutls_certificate_server_set_request(session,
-                                          ctxt->sc->client_verify_mode);
+                                              ctxt->sc->client_verify_mode);
 
     /* set the new server credentials 
@@ -820 +820 @@
                           "GnuTLS: Peer is set to IGNORE");
 #endif
-        } else {
-            rv = mgs_cert_verify(r, ctxt);
-            if (rv != DECLINED) {
-                return rv;
-            }
+            return DECLINED;
+        }
+        rv = mgs_cert_verify(r, ctxt);
+        if (rv != DECLINED &&
+            (rv != HTTP_FORBIDDEN ||
+             dc->client_verify_mode == GNUTLS_CERT_REQUIRE)) {
+            return rv;
         }
     }