diff options
Diffstat (limited to 'lib/gnutls_ui.c')
| -rw-r--r-- | lib/gnutls_ui.c | 19 |
1 files changed, 18 insertions, 1 deletions
diff --git a/lib/gnutls_ui.c b/lib/gnutls_ui.c index b19a4b8499..8a5708a1de 100644 --- a/lib/gnutls_ui.c +++ b/lib/gnutls_ui.c @@ -373,7 +373,6 @@ void gnutls_anon_set_params_function(gnutls_anon_server_credentials res, res->params_func = func; } - /** * gnutls_certificate_set_verify_flags - This function will set the flags to be used at certificate verification * @res: is a gnutls_certificate_credentials structure @@ -389,6 +388,24 @@ void gnutls_certificate_set_verify_flags(gnutls_certificate_credentials res, uns } /** + * gnutls_certificate_set_verify_limits - This function will set the upper limits to be used at certificate verification + * @res: is a gnutls_certificate_credentials structure + * @max_bits: is the number of bits of an acceptable certificate (default 8200) + * @max_depth: is maximum depth of the verification of a certificate chain (default 5) + * + * This function will set some upper limits for the default verification function + * (gnutls_certificate_verify_peers()) to avoid denial of service attacks. + * + **/ +void gnutls_certificate_set_verify_limits(gnutls_certificate_credentials res, unsigned int max_bits, + unsigned int max_depth) +{ + res->verify_depth = max_depth; + res->verify_bits = max_bits; +} + + +/** * gnutls_certificate_set_rsa_export_params - This function will set the RSA parameters for a server to use * @res: is a gnutls_certificate_credentials structure * @rsa_params: is a structure that holds temporary RSA parameters. |