gnutls-cli: Allow verification using V1 CAs.

2 files changed, 3 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 4c4a6a9d77..3aca5aac3a 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,8 @@ See the end for copying conditions.
 
 * Version 2.10.1 (unreleased)
 
+** gnutls-cli: Allow verification using V1 CAs.
+
 ** libgnutls: Correctly deinitialize crypto API functions to prevent
 a memory leak. Reported by Mads Kiilerich.
 
diff --git a/src/cli.c b/src/cli.c
index 6b08beab75..5a205ff473 100644
--- a/src/cli.c
+++ b/src/cli.c
@@ -512,6 +512,7 @@ init_tls_session (const char *hostname)
 
   gnutls_certificate_client_set_retrieve_function (xcred, cert_callback);
   gnutls_certificate_set_verify_function (xcred, cert_verify_callback);
+  gnutls_certificate_set_verify_flags(xcred, GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT);
 
   /* send the fingerprint */
 #ifdef ENABLE_OPENPGP