gnutls_certificate_set_verify_limits(3) [suse man page]
gnutls_certificate_set_verify_limits(3) gnutls gnutls_certificate_set_verify_limits(3) NAME
gnutls_certificate_set_verify_limits - set the upper limits to be used at certificate verification SYNOPSIS
#include <gnutls/gnutls.h> void gnutls_certificate_set_verify_limits(gnutls_certificate_credentials_t res, unsigned int max_bits, unsigned int max_depth); ARGUMENTS
gnutls_certificate_credentials_t res is a gnutls_certificate_credentials structure unsigned int max_bits is the number of bits of an acceptable certificate (default 8200) unsigned int max_depth is maximum depth of the verification of a certificate chain (default 5) DESCRIPTION
This function will set some upper limits for the default verification function, gnutls_certificate_verify_peers2(), to avoid denial of ser- vice attacks. You can set them to zero to disable limits. REPORTING BUGS
Report bugs to <bug-gnutls@gnu.org>. GnuTLS home page: http://www.gnu.org/software/gnutls/ General help using GNU software: http://www.gnu.org/gethelp/ COPYRIGHT
Copyright (C) 2008 Free Software Foundation. Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. SEE ALSO
The full documentation for gnutls is maintained as a Texinfo manual. If the info and gnutls programs are properly installed at your site, the command info gnutls should give you access to the complete manual. gnutls 2.8.6 gnutls_certificate_set_verify_limits(3)
Check Out this Related Man Page
gnutls_certificate_verify_peers2(3) gnutls gnutls_certificate_verify_peers2(3) NAME
gnutls_certificate_verify_peers2 - API function SYNOPSIS
#include <gnutls/gnutls.h> int gnutls_certificate_verify_peers2(gnutls_session_t session, unsigned int * status); ARGUMENTS
gnutls_session_t session is a gnutls session unsigned int * status is the output of the verification DESCRIPTION
This function will verify the peer's certificate and store the status in the status variable as a bitwise or'd gnutls_certificate_status_t values or zero if the certificate is trusted. Note that value in status is set only when the return value of this function is success (i.e, failure to trust a certificate does not imply a negative return value). If available the OCSP Certificate Status extension will be utilized by this function. To avoid denial of service attacks some default upper limits regarding the certificate key size and chain size are set. To override them use gnutls_certificate_set_verify_limits(). Note that you must also check the peer's name in order to check if the verified certificate belongs to the actual peer, see gnutls_x509_crt_check_hostname(), or use gnutls_certificate_verify_peers3(). RETURNS
a negative error code on error and GNUTLS_E_SUCCESS (0) on success. REPORTING BUGS
Report bugs to <bug-gnutls@gnu.org>. General guidelines for reporting bugs: http://www.gnu.org/gethelp/ GnuTLS home page: http://www.gnu.org/software/gnutls/ COPYRIGHT
Copyright (C) 2012 Free Software Foundation, Inc.. Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. SEE ALSO
The full documentation for gnutls is maintained as a Texinfo manual. If the info and gnutls programs are properly installed at your site, the command info gnutls should give you access to the complete manual. As an alternative you may obtain the manual from: http://www.gnu.org/software/gnutls/manual/ gnutls 3.1.15 gnutls_certificate_verify_peers2(3)