Blame doc/functions/dane_verify_session_crt
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@deftypefun {int} {dane_verify_session_crt} (dane_state_t @var{s}, gnutls_session_t @var{session}, const char * @var{hostname}, const char * @var{proto}, unsigned int @var{port}, unsigned int @var{sflags}, unsigned int @var{vflags}, unsigned int * @var{verify})
|
|
Packit Service |
4684c1 |
@var{s}: A DANE state structure (may be NULL)
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{session}: A gnutls session
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{hostname}: The hostname associated with the chain
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{proto}: The protocol of the service connecting (e.g. tcp)
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{port}: The port of the service connecting (e.g. 443)
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{sflags}: Flags for the initialization of @code{s} (if NULL)
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{vflags}: Verification flags; an OR'ed list of @code{dane_verify_flags_t} .
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@var{verify}: An OR'ed list of @code{dane_verify_status_t} .
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
This function will verify session's certificate chain against the
|
|
Packit Service |
4684c1 |
CA constrains and/or the certificate available via DANE.
|
|
Packit Service |
4684c1 |
See @code{dane_verify_crt()} for more information.
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
This will not verify the chain for validity; unless the DANE
|
|
Packit Service |
4684c1 |
verification is restricted to end certificates, this must be
|
|
Packit Service |
4684c1 |
be performed separately using @code{gnutls_certificate_verify_peers3()} .
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
@strong{Returns:} a negative error code on error and @code{DANE_E_SUCCESS} (0)
|
|
Packit Service |
4684c1 |
when the DANE entries were successfully parsed, irrespective of
|
|
Packit Service |
4684c1 |
whether they were verified (see @code{verify} for that information). If
|
|
Packit Service |
4684c1 |
no usable entries were encountered @code{DANE_E_REQUESTED_DATA_NOT_AVAILABLE}
|
|
Packit Service |
4684c1 |
will be returned.
|
|
Packit Service |
4684c1 |
@end deftypefun
|