aboutsummaryrefslogtreecommitdiff
path: root/libsylph/ssl.c
diff options
context:
space:
mode:
authorhiro <hiro@ee746299-78ed-0310-b773-934348b2243d>2014-03-20 08:20:17 +0000
committerhiro <hiro@ee746299-78ed-0310-b773-934348b2243d>2014-03-20 08:20:17 +0000
commit6d0bacb07959433f150f871e4449532fa0e19e9b (patch)
tree0e93240148b055fef45ae798a3295062922f1629 /libsylph/ssl.c
parentcc1ff491bdfbf2ef2e75030041503bff06d80df3 (diff)
implemented SSL wildcard certificate validation (based on libcurl).
git-svn-id: svn://sylpheed.sraoss.jp/sylpheed/trunk@3362 ee746299-78ed-0310-b773-934348b2243d
Diffstat (limited to 'libsylph/ssl.c')
-rw-r--r--libsylph/ssl.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/libsylph/ssl.c b/libsylph/ssl.c
index 86c8d61a..4763a741 100644
--- a/libsylph/ssl.c
+++ b/libsylph/ssl.c
@@ -319,7 +319,9 @@ gboolean ssl_init_socket_with_method(SockInfo *sockinfo, SSLMethod method)
} else {
verify_result = X509_V_ERR_APPLICATION_VERIFICATION;
}
- } else if (verify_result == X509_V_ERR_CERT_HAS_EXPIRED) {
+ }
+
+ if (verify_result == X509_V_ERR_CERT_HAS_EXPIRED) {
log_message("SSL certificate of %s has expired\n", sockinfo->hostname);
expired = TRUE;
} else if (g_slist_find_custom(trust_list, server_cert,