Added verification flag GNUTLS_VERIFY_DO_NOT_ALLOW_UNSORTED_CHAIN
commit9ea5adce307f8bdfeff096e924f25957a5e1c63f
authorNikos Mavrogiannopoulos <nmav@gnutls.org>
Fri, 2 Nov 2012 12:11:46 +0000 (2 13:11 +0100)
committerNikos Mavrogiannopoulos <nmav@gnutls.org>
Fri, 2 Nov 2012 12:17:49 +0000 (2 13:17 +0100)
tree388a27a0e832263f476775669a16a488291b4400
parent5b4bd9afeac9eaf9b2caa235196517bf0720ec5d
Added verification flag GNUTLS_VERIFY_DO_NOT_ALLOW_UNSORTED_CHAIN

The default is now GNUTLS_VERIFY_ALLOW_UNSORTED_CHAIN, and
removed gnutls_certificate_update_verify_flags().
NEWS
lib/gnutls_cert.c
lib/gnutls_ui.c
lib/includes/gnutls/gnutls.h.in
lib/includes/gnutls/x509.h
lib/x509/verify-high.c
tests/chainverify-unsorted.c