gnutls_session_set_verify_cert(3)

📦
version 3.8.13 · 7 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, fedora 43, fedora 44, ubuntu stonking

✨ gnutls_session_set_verify_cert(3) — the gnutls manual, but make it make sense ✨

okay bestie, sit down, grab your boba 🧋 because we're talking about the gnutls manual page for gnutls_session_set_verify_cert(3). this one is lowkey important and highkey the vibe check your TLS client needs before it trusts literally anyone.

💖 NAME 💖

gnutls_session_set_verify_cert — it's an API function, periodt. ✨

🎀 SYNOPSIS 🎀

#include <gnutls/gnutls.h>

void gnutls_session_set_verify_cert(gnutls_session_t session, const char
* hostname, unsigned flags);

like, that's the whole signature. no cap. 🫶

🌸 ARGUMENTS 🌸

  • gnutls_session_t session — bestie this is a gnutls session, that's it, that's the whole description 💅
  • const char * hostname — the expected name of the peer. it may be NULL, she's flexible like that 🙈
  • unsigned flags — flags for certificate verification, specifically gnutls_certificate_verify_flags 👑

🦋 DESCRIPTION 🦋

so here's the tea ☕: this function tells GnuTLS to verify the peer's certificate using the hostname you gave it. if the verification fails, the handshake ALSO FAILS — and it goes down with GNUTLS_E_CERTIFICATE_VERIFICATION_ERROR. yeah. it's giving dramatic 💀. in that case you can go get the verification result using gnutls_session_get_verify_cert_status().

now listen closely because this part matters: the hostname pointer you hand over must remain valid for the lifetime of the session. more precisely, it should still be around during any subsequent handshakes. like, don't let it ghost 👻. if you don't provide a hostname at all, then no hostname verification will be performed. and if you want a more advanced verification function, go check out gnutls_session_set_verify_cert2() — she's the upgraded version, main character energy fr fr.

if flags contains a profile, then this function should be called after any session priority setting functions. order matters bestie, we don't do chaos here (well, we do, but not in this specific case) 🌈.

and the whole point: gnutls_session_set_verify_cert() is intended to be used by TLS clients to verify the server's certificate. that's her job. that's her purpose. iconic. 💜

⭐ SINCE ⭐

3.4.6 — she's been here a minute, respect the elders 🎀

😭 REPORTING BUGS 😭

found a bug? don't be shy, tell the girlies:

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. slay, that's a very chill license, we love to see it 💖

🌈 SEE ALSO 🌈

the full documentation for gnutls is maintained as a Texinfo manual. if the /usr/share/doc/gnutls/ directory does not contain the HTML form, visit:

https://www.gnutls.org/manual/

and that's the whole page bestie!! this was gnutls_session_set_verify_cert(3) from the gnutls manual, version 3.8.13 — mwah 💋 go verify some certificates, stay safe, and remember: never trust a peer without a vibe check. 🫶✨🎀🦋

📦 where this page comes from