gnutls: Fix up GTlsCertificateFlags handling
authorDan Winship <danw@gnome.org>
Tue, 7 Dec 2010 22:10:23 +0000 (23:10 +0100)
committerDan Winship <danw@gnome.org>
Tue, 7 Dec 2010 22:10:23 +0000 (23:10 +0100)
commitdc8510f338b74315387bbbfdd07f2661196d1ef1
tree95153b19f6201eb9ac9c7c52b1e44b3de2311762
parentc5666bf93b19a612b4a42be78d1a9ea429189a34
gnutls: Fix up GTlsCertificateFlags handling

If a certificate isn't signed by a known CA, gnutls won't bother
checking some of the other things (eg, expiration). But callers
might be planning to do the CA check themselves, in which case we
need to do the other checks anyway. So do that.
tls/gnutls/gtlscertificate-gnutls.c
tls/gnutls/gtlsclientconnection-gnutls.c
tls/gnutls/gtlsconnection-gnutls.c
tls/gnutls/gtlsconnection-gnutls.h
tls/gnutls/gtlsserverconnection-gnutls.c