procyberian/emacs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Improve documentation of 'gnutls-verify-error'

Browse source 
* lisp/net/gnutls.el (gnutls-verify-error): Improve and expand
doc string.  (Bug#26845)
This commit is contained in:
Eli Zaretskii 2017-05-09 22:04:45 +03:00
parent 908498cc01
commit eaa00584ce
1 changed files with 21 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
lisp/net/gnutls.el
View file

@ -52,7 +52,27 @@ set this variable to \"normal:-dhe-rsa\"."
string))
(defcustom gnutls-verify-error nil
"If non-nil, this should be a list of checks per hostname regex or t."
"If non-nil, this should be t or a list of checks per hostname regex.
If nil, the default, failures in certificate verification will be
logged (subject to `gnutls-log-level'), but the connection will be
allowed to proceed.
If the value is a list, it should have the form
((HOST-REGEX FLAGS...) (HOST-REGEX FLAGS...) ...)
where each HOST-REGEX is a regular expression to be matched
against the hostname, and FLAGS is either t or a list of
one or more verification flags. The supported flags and the
corresponding conditions to be tested are:
:trustfiles -- certificate must be issued by a trusted authority.
:hostname -- hostname must match presented certificate's host name.
t -- all of the above conditions are tested.
If the condition test fails, an error will be signaled.
If the value of this variable is t, every connection will be subjected
to all of the tests described above."
:group 'gnutls
:version "24.4"
:type '(choice