mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2025-03-24 22:15:07 +00:00
Add context-specific CRT verification callbacks
This commit is contained in:
parent
7b58fb1d1c
commit
726c97a825
|
@ -1494,6 +1494,30 @@ void mbedtls_ssl_set_bio( mbedtls_ssl_context *ssl,
|
||||||
void mbedtls_ssl_set_mtu( mbedtls_ssl_context *ssl, uint16_t mtu );
|
void mbedtls_ssl_set_mtu( mbedtls_ssl_context *ssl, uint16_t mtu );
|
||||||
#endif /* MBEDTLS_SSL_PROTO_DTLS */
|
#endif /* MBEDTLS_SSL_PROTO_DTLS */
|
||||||
|
|
||||||
|
#if defined(MBEDTLS_X509_CRT_PARSE_C)
|
||||||
|
/**
|
||||||
|
* \brief Set a connection-specific verification callback (optional).
|
||||||
|
*
|
||||||
|
* If set, the provided verify callback is called for each
|
||||||
|
* certificate in the peer's CRT chain, including the trusted
|
||||||
|
* root. For more information, please see the documentation of
|
||||||
|
* \c mbedtls_x509_crt_verify().
|
||||||
|
*
|
||||||
|
* \note This call is analogous to mbedtls_ssl_conf_verify() but
|
||||||
|
* binds the verification callback and context to an SSL context
|
||||||
|
* as opposed to an SSL configuration.
|
||||||
|
* If mbedtls_ssl_conf_verify() and mbedtls_ssl_set_verify()
|
||||||
|
* are both used, mbedtls_ssl_set_verify() takes precedence.
|
||||||
|
*
|
||||||
|
* \param conf The SSL context to use.
|
||||||
|
* \param f_vrfy The verification callback to use during CRT verification.
|
||||||
|
* \param p_vrfy The opaque context to be passed to the callback.
|
||||||
|
*/
|
||||||
|
void mbedtls_ssl_set_verify( mbedtls_ssl_context *ssl,
|
||||||
|
int (*f_vrfy)(void *, mbedtls_x509_crt *, int, uint32_t *),
|
||||||
|
void *p_vrfy );
|
||||||
|
#endif /* MBEDTLS_X509_CRT_PARSE_C */
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* \brief Set the timeout period for mbedtls_ssl_read()
|
* \brief Set the timeout period for mbedtls_ssl_read()
|
||||||
* (Default: no timeout.)
|
* (Default: no timeout.)
|
||||||
|
|
Loading…
Reference in a new issue