Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

gnutls_certificate_verify_peers2(3) [centos man page]

gnutls_certificate_verify_peers2(3)				      gnutls				       gnutls_certificate_verify_peers2(3)

NAME

       gnutls_certificate_verify_peers2 - API function

SYNOPSIS

       #include <gnutls/gnutls.h>

       int gnutls_certificate_verify_peers2(gnutls_session_t session, unsigned int * status);

ARGUMENTS

       gnutls_session_t session
		   is a gnutls session

       unsigned int * status
		   is the output of the verification

DESCRIPTION

       This function will verify the peer's certificate and store the status in the  status variable as a bitwise or'd gnutls_certificate_status_t
       values or zero if the certificate is trusted. Note that value in  status is set only when the return value  of  this  function  is  success
       (i.e, failure to trust a certificate does not imply a negative return value).

       If available the OCSP Certificate Status extension will be utilized by this function.

       To  avoid  denial  of service attacks some default upper limits regarding the certificate key size and chain size are set. To override them
       use gnutls_certificate_set_verify_limits().

       Note that you must also check the  peer's  name	in  order  to  check  if  the  verified  certificate  belongs  to  the	actual	peer,  see
       gnutls_x509_crt_check_hostname(), or use gnutls_certificate_verify_peers3().

RETURNS

       a negative error code on error and GNUTLS_E_SUCCESS (0) on success.

REPORTING BUGS

       Report bugs to <bug-gnutls@gnu.org>.
       General guidelines for reporting bugs: http://www.gnu.org/gethelp/
       GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT

       Copyright (C) 2012 Free Software Foundation, Inc..
       Copying	and  distribution  of  this file, with or without modification, are permitted in any medium without royalty provided the copyright
       notice and this notice are preserved.

SEE ALSO

       The full documentation for gnutls is maintained as a Texinfo manual.  If the info and gnutls programs are properly installed at your  site,
       the command

	      info gnutls

       should give you access to the complete manual.  As an alternative you may obtain the manual from:

	      http://www.gnu.org/software/gnutls/manual/

gnutls								      3.1.15				       gnutls_certificate_verify_peers2(3)

Check Out this Related Man Page

gnutls_certificate_set_verify_function(3)			      gnutls				 gnutls_certificate_set_verify_function(3)

NAME

       gnutls_certificate_set_verify_function - API function

SYNOPSIS

       #include <gnutls/gnutls.h>

       void gnutls_certificate_set_verify_function(gnutls_certificate_credentials_t cred, gnutls_certificate_verify_function * func);

ARGUMENTS

       gnutls_certificate_credentials_t cred
		   is a gnutls_certificate_credentials_t structure.

       gnutls_certificate_verify_function * func
		   is the callback function

DESCRIPTION

       This  function  sets  a	callback to be called when peer's certificate has been received in order to verify it on receipt rather than doing
       after the handshake is completed.

       The callback's function prototype is: int (*callback)(gnutls_session_t);

       If the callback function is provided then gnutls will call it, in the handshake, just after the certificate message has been received.	To
       verify  or  obtain  the	certificate  the gnutls_certificate_verify_peers2(), gnutls_certificate_type_get(), gnutls_certificate_get_peers()
       functions can be used.

       The callback function should return 0 for the handshake to continue or non-zero to terminate.

SINCE

       2.10.0

REPORTING BUGS

       Report bugs to <bug-gnutls@gnu.org>.
       General guidelines for reporting bugs: http://www.gnu.org/gethelp/
       GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT

       Copyright (C) 2012 Free Software Foundation, Inc..
       Copying and distribution of this file, with or without modification, are permitted in any medium without  royalty  provided  the  copyright
       notice and this notice are preserved.

SEE ALSO

       The  full documentation for gnutls is maintained as a Texinfo manual.  If the info and gnutls programs are properly installed at your site,
       the command

	      info gnutls

       should give you access to the complete manual.  As an alternative you may obtain the manual from:

	      http://www.gnu.org/software/gnutls/manual/

gnutls								      3.1.15				 gnutls_certificate_set_verify_function(3)
Man Page