Fix non-checked certificate trust (gnutls)

babelouest / ulfius

Web Framework to build REST APIs, Webservices or any HTTP endpoint in C language. Can stream large amount of data, integrate JSON data with Jansson, and create websocket services

https://babelouest.github.io/ulfius

GNU Lesser General Public License v2.1

1.08k stars 182 forks source link

Fix non-checked certificate trust (gnutls) #153

Closed yomgui1 closed 4 years ago

yomgui1 commented 4 years ago

This patch fixes client certificate verification. Without, a MITM attack is possible as we don't check the gnutls client certificate verification status code.

yomgui1 commented 4 years ago

wrong code push