gnutls: Try to find root certificates locally if not anchored
authorStef Walter <stefw@gnome.org>
Wed, 8 Aug 2012 04:52:12 +0000 (06:52 +0200)
committerStef Walter <stefw@gnome.org>
Fri, 10 Aug 2012 20:50:36 +0000 (22:50 +0200)
commitacec8a8d9098341c58cbc73c1f8c25a01dd0b8b8
tree1bec82538cd8a4d84b9710ea2bd1b524ded35452
parent941c48fe5438b1316b871e5f9ec7ee139de8baa8
gnutls: Try to find root certificates locally if not anchored

 * If a server erroneously sends us a root certificate, and it
   is not anchored, then try to lookup a certificate for the same
   issuer in the database.
 * Add a test for this case.

https://bugzilla.gnome.org/show_bug.cgi?id=681299
tls/gnutls/gtlsdatabase-gnutls.c
tls/tests/file-database.c
tls/tests/files/ca-verisign-sha1.pem [new file with mode: 0644]
tls/tests/files/chain-with-verisign-md2.pem [new file with mode: 0644]