Revision 84211333
Von martin vor etwa 15 Jahren hinzugefügt
| src/sio/syncio_tls.c | ||
|---|---|---|
|
rv=GWEN_SyncIo_Tls_GetPeerCert(sio);
|
||
|
if (rv<0) {
|
||
|
if (GWEN_SyncIo_GetFlags(sio) & GWEN_SYNCIO_TLS_FLAGS_NEED_PEER_CERT) {
|
||
|
DBG_INFO(GWEN_LOGDOMAIN, "No peer certificate when needed, aborting connection");
|
||
|
DBG_ERROR(GWEN_LOGDOMAIN, "No peer certificate when needed, aborting connection");
|
||
|
GWEN_SyncIo_SetStatus(sio, GWEN_SyncIo_Status_Disconnected);
|
||
|
GWEN_SyncIo_Tls_UndoPrepare(sio);
|
||
|
GWEN_SyncIo_Disconnect(baseIo);
|
||
| ... | ... | |
|
/* present cert to the user */
|
||
|
rv=GWEN_Gui_CheckCert(xio->peerCertDescr, sio, 0);
|
||
|
if (rv<0) {
|
||
|
DBG_INFO(GWEN_LOGDOMAIN, "Peer cert not accepted (%d), aborting", rv);
|
||
|
DBG_ERROR(GWEN_LOGDOMAIN, "Peer cert not accepted (%d), aborting", rv);
|
||
|
GWEN_SyncIo_SetStatus(sio, GWEN_SyncIo_Status_Disconnected);
|
||
|
GWEN_SyncIo_Tls_UndoPrepare(sio);
|
||
|
GWEN_SyncIo_Disconnect(baseIo);
|
||
Auch abrufbar als: Unified diff
Improved TLS error message in case a cert is rejected.
git-svn-id: https://devel.aqbanking.de/svn/gwenhywfar/trunk@1786 70169cfe-8b10-0410-8925-dcb4b91034d8