[gnutls-devel] [sr #108634] Getter functions for gnutls_certificate_credentials_t

Armin Burgmeier INVALID.NOREPLY at gnu.org
Mon Aug 18 18:47:44 CEST 2014


                 Summary: Getter functions for
                 Project: GnuTLS
            Submitted by: aburgm
            Submitted on: Mon 18 Aug 2014 04:47:43 PM GMT
                Category: Core library
                Priority: 5 - Normal
                Severity: 1 - Wish
                  Status: None
                 Privacy: Public
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
        Operating System: None



There are setter functions to set certificate verification flags, trusted CA
certificates, and other properties of a gnutls_certificate_credentials_t
structure, but there are no corresponding getter functions.

Is there a particular reason for this?

I find myself often in the situation where I would like to access some of the
fields that I have previously set in the gnutls_certificate_credentials_t

For example, I want to verify a certificate, and if the certificate is invalid
because the issuer is not found (this I can do with
gnutls_certificate_verify_peers), I want to re-validate it with different
flags to see whether there are other issues with the certificate (for example,
expired). Or after I set the trusted certificates with
gnutls_certificate_set_x509_system_trust(), I want to present a list of these
certificates in a user interface, so it would be good if I could obtain the
list of trusted CAs from the gnutls_certificate_credentials_t structure.


Reply to this item at:


  Message sent via/by Savannah

More information about the Gnutls-devel mailing list