mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2025-01-18 10:54:03 -05:00
GnuTLS: Check for any unknown verification failure
After having checked all known GNUTLS_CERT_* error cases that we care about, check that no other errors have been indicated by gnutls_certificate_verify_peers2() as a reason to reject negotiation. Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
parent
e0d431a515
commit
4bc13bf709
@ -713,6 +713,13 @@ static int tls_connection_verify_peer(gnutls_session_t session)
|
|||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (status != 0) {
|
||||||
|
wpa_printf(MSG_INFO, "TLS: Unknown verification status: %d",
|
||||||
|
status);
|
||||||
|
err = GNUTLS_A_INTERNAL_ERROR;
|
||||||
|
goto out;
|
||||||
|
}
|
||||||
|
|
||||||
os_get_time(&now);
|
os_get_time(&now);
|
||||||
|
|
||||||
certs = gnutls_certificate_get_peers(session, &num_certs);
|
certs = gnutls_certificate_get_peers(session, &num_certs);
|
||||||
|
Loading…
Reference in New Issue
Block a user