diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2008-11-09 07:36:44 +0000 |
|---|---|---|
| committer | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2008-11-09 07:36:44 +0000 |
| commit | ce4186b4c3f8d78bcd77fdc93ab1cbe00e2b45e2 (patch) | |
| tree | db9fbe036481a27edc419b2c2e2528e1dfe3ed18 /src/LibgnutlsTLSContext.h | |
| parent | 79d463fae2e1e3cf87b61bb519de1428f1f2b39c (diff) | |
2008-11-09 Tatsuhiro Tsujikawa <t-tujikawa@users.sourceforge.net>
Added the ability to verify peer in SSL/TLS using given CA
certificates.
The CA certificates are specified in --ca-certificate option.
By default, the verification is disabled. Use --check-certificate
option to enable it.
* src/HttpRequestCommand.cc
* src/LibgnutlsTLSContext.cc
* src/LibgnutlsTLSContext.h
* src/LibsslTLSContext.cc
* src/LibsslTLSContext.h
* src/MultiUrlRequestInfo.cc
* src/OptionHandlerFactory.cc
* src/SocketCore.cc
* src/SocketCore.h
* src/a2functional.h
* src/message.h
* src/option_processing.cc
* src/prefs.cc
* src/prefs.h
* src/usage_text.h
Diffstat (limited to 'src/LibgnutlsTLSContext.h')
| -rw-r--r-- | src/LibgnutlsTLSContext.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/LibgnutlsTLSContext.h b/src/LibgnutlsTLSContext.h index 5d33438a..043b46f0 100644 --- a/src/LibgnutlsTLSContext.h +++ b/src/LibgnutlsTLSContext.h @@ -53,6 +53,8 @@ private: bool _good; + bool _peerVerificationEnabled; + Logger* _logger; public: TLSContext(); @@ -71,6 +73,12 @@ public: bool bad() const; gnutls_certificate_credentials_t getCertCred() const; + + void enablePeerVerification(); + + void disablePeerVerification(); + + bool peerVerificationEnabled() const; }; } // namespace aria2 |