Always check the certificates chain - it does not make any sense, is counter-intuitiv...
authorRémi Denis-Courmont <rem@videolan.org>
Wed, 17 Oct 2007 17:14:30 +0000 (17:14 +0000)
committerRémi Denis-Courmont <rem@videolan.org>
Wed, 17 Oct 2007 17:14:30 +0000 (17:14 +0000)
commit7b3eb71e858bfcb3f22d07985f27226306e26ce2
tree041ed0b388a48566c1ed7abf9b2cb52b4c365b1c
parentc7d798397b5a4a9e985f1da735ea842b58dd63af
Always check the certificates chain - it does not make any sense, is counter-intuitive and insecure to use x509 but not validate certs.
The whole security and point of TLS rely on this...
modules/misc/gnutls.c