loudmouth/lm-ssl-gnutls.c
changeset 633 08a8206c3c21
parent 607 e2bd14357c9a
child 636 ae3025b600fa
equal deleted inserted replaced
632:024b71c4b1d7 633:08a8206c3c21
    35 #define CA_PEM_FILE "/etc/ssl/certs/ca-certificates.crt"
    35 #define CA_PEM_FILE "/etc/ssl/certs/ca-certificates.crt"
    36 
    36 
    37 struct _LmSSL {
    37 struct _LmSSL {
    38     LmSSLBase base;
    38     LmSSLBase base;
    39 
    39 
    40     gnutls_session                 gnutls_session;
    40     gnutls_session_t                 gnutls_session;
    41     gnutls_certificate_credentials gnutls_xcred;
    41     gnutls_certificate_credentials_t gnutls_xcred;
    42     gboolean                       started;
    42     gboolean                         started;
    43 };
    43 };
    44 
    44 
    45 static gboolean       ssl_verify_certificate    (LmSSL       *ssl,
    45 static gboolean       ssl_verify_certificate    (LmSSL       *ssl,
    46                                                  const gchar *server);
    46                                                  const gchar *server);
    47 
    47 
   104             return FALSE;
   104             return FALSE;
   105         }
   105         }
   106     }
   106     }
   107 
   107 
   108     if (gnutls_certificate_type_get (ssl->gnutls_session) == GNUTLS_CRT_X509) {
   108     if (gnutls_certificate_type_get (ssl->gnutls_session) == GNUTLS_CRT_X509) {
   109         const gnutls_datum* cert_list;
   109         const gnutls_datum_t* cert_list;
   110         guint cert_list_size;
   110         guint cert_list_size;
   111         size_t digest_size;
   111         size_t digest_size;
   112         gnutls_x509_crt cert;
   112         gnutls_x509_crt_t cert;
   113 
   113 
   114         cert_list = gnutls_certificate_get_peers (ssl->gnutls_session, &cert_list_size);
   114         cert_list = gnutls_certificate_get_peers (ssl->gnutls_session, &cert_list_size);
   115         if (cert_list == NULL) {
   115         if (cert_list == NULL) {
   116             if (base->func (ssl, LM_SSL_STATUS_NO_CERT_FOUND,
   116             if (base->func (ssl, LM_SSL_STATUS_NO_CERT_FOUND,
   117                             base->func_data) != LM_SSL_RESPONSE_CONTINUE) {
   117                             base->func_data) != LM_SSL_RESPONSE_CONTINUE) {