[gnutls-devel] [sr #108634] Getter functions for gnutls_certificate_credentials_t

[Armin Burgmeier]

URL:
  <http://savannah.gnu.org/support/?108634>

                 Summary: Getter functions for
gnutls_certificate_credentials_t
                 Project: GnuTLS
            Submitted by: aburgm
            Submitted on: Mon 18 Aug 2014 04:47:43 PM GMT
                Category: Core library
                Priority: 5 - Normal
                Severity: 1 - Wish
                  Status: None
                 Privacy: Public
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
        Operating System: None

    _______________________________________________________

Details:

There are setter functions to set certificate verification flags, trusted CA
certificates, and other properties of a gnutls_certificate_credentials_t
structure, but there are no corresponding getter functions.

Is there a particular reason for this?

I find myself often in the situation where I would like to access some of the
fields that I have previously set in the gnutls_certificate_credentials_t
structure.

For example, I want to verify a certificate, and if the certificate is invalid
because the issuer is not found (this I can do with
gnutls_certificate_verify_peers), I want to re-validate it with different
flags to see whether there are other issues with the certificate (for example,
expired). Or after I set the trusted certificates with
gnutls_certificate_set_x509_system_trust(), I want to present a list of these
certificates in a user interface, so it would be good if I could obtain the
list of trusted CAs from the gnutls_certificate_credentials_t structure.




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/support/?108634>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/