diff options
author | Ludovic Courtès <ludo@gnu.org> | 2020-01-10 15:13:40 +0100 |
---|---|---|
committer | Ludovic Courtès <ludo@gnu.org> | 2020-01-13 11:06:01 +0100 |
commit | 38f14ce65d8d86a9a6acabc4e84df59f5eb13b04 (patch) | |
tree | fa0eeec9ea2a802474b0e74c203bff2f788ee86e /doc/ref/libguile-concepts.texi | |
parent | bcba2132849bc395f716910e27a9273d1a152a9b (diff) | |
download | guile-38f14ce65d8d86a9a6acabc4e84df59f5eb13b04.tar.gz |
web: 'open-socket-for-uri' can verify the server's X.509 certificate.
This is largely based on Guix commit
bc3c41ce36349ed4ec758c70b48a7059e363043a and subsequent changes to that
code.
* module/web/client.scm (x509-certificate-directory): New variable.
(set-certificate-credentials-x509-trust-file!*)
(make-credendials-with-ca-trust-files, peer-certificate)
(assert-valid-server-certificate, print-tls-certificate-error): New
procedures.
<top level>: Add call to 'set-exception-printer!'.
(tls-wrap): Add #:verify-certificate? parameter. When it is true, call
'make-credendials-with-ca-trust-files', pass it to
'set-session-credentials!', and call 'assert-valid-server-certificate'.
(open-socket-for-uri): Add #:verify-certificate? parameter and pass it
to 'tls-wrap'.
(http-request): Add #:verify-certificate? parameter and pass it to
'open-socket-for-uri'.
(define-http-verb): Add #:verify-certificate? parameter and pass it to
'http-request'.
* doc/ref/web.texi (Web Client): Update documentation of
'open-socket-for-uri' and 'http-request'. Document
'x509-certificate-directory'.
Diffstat (limited to 'doc/ref/libguile-concepts.texi')
0 files changed, 0 insertions, 0 deletions