Skip to content

Perform certificate verification a bit earlier

Michael Catanzaro requested to merge mcatanzaro/verification-during-handshake into master

We should perform certificate verification when GnuTLS expects us to do so, during the TLS handshake, using gnutls_session_set_verify_function(), rather than waiting until the handshake has completed and then performing verification right after.

Does anybody want to review it before landing? (Plausible reviewers: @danw, @pwithnall, @sdroege)

Merge request reports