diff options
| author | Werner Koch <[email protected]> | 2017-02-21 08:37:07 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2017-02-21 08:37:07 +0000 |
| commit | 493c142e582ff5ef1b5fdfcb9653715ef43e83e9 (patch) | |
| tree | cd404a685a10396849d38a9e795432c9d8e1a3e1 /dirmngr/http-ntbtls.c | |
| parent | dirmngr: Add a magic field to the http structs. (diff) | |
| download | gnupg-493c142e582ff5ef1b5fdfcb9653715ef43e83e9.tar.gz gnupg-493c142e582ff5ef1b5fdfcb9653715ef43e83e9.zip | |
dirmngr: New Assuan option "http-crl".
* dirmngr/dirmngr.h (server_control_s): New flag 'http_no_crl'.
* dirmngr/dirmngr.c (dirmngr_init_default_ctrl): Set this flag.
* dirmngr/server.c (option_handler): New option "http-crl"
* dirmngr/http.h (HTTP_FLAG_NO_CRL): New flag.
* dirmngr/http-ntbtls.c (gnupg_http_tls_verify_cb): Consult this flag.
* dirmngr/ks-engine-hkp.c (send_request): Set flag depending on CTRL.
* dirmngr/ks-engine-http.c (ks_http_fetch): Ditto.
* dirmngr/t-http.c (main): New option --no-crl.
--
This new option can be used to enable CRL checks on a per session
base. The default is not to use CRLs for https connections.
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'dirmngr/http-ntbtls.c')
| -rw-r--r-- | dirmngr/http-ntbtls.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/dirmngr/http-ntbtls.c b/dirmngr/http-ntbtls.c index 5686877ec..3038cae6b 100644 --- a/dirmngr/http-ntbtls.c +++ b/dirmngr/http-ntbtls.c @@ -78,8 +78,8 @@ gnupg_http_tls_verify_cb (void *opaque, if ((http_flags & HTTP_FLAG_TRUST_SYS)) validate_flags |= VALIDATE_FLAG_SYSTRUST; - /* FIXME: For now we don't use CRLs. */ - validate_flags |= VALIDATE_FLAG_NOCRLCHECK; + if ((http_flags & HTTP_FLAG_NO_CRL)) + validate_flags |= VALIDATE_FLAG_NOCRLCHECK; err = validate_cert_chain (ctrl, hostcert, NULL, validate_flags, NULL); |