summaryrefslogtreecommitdiff
path: root/doc/ref/libguile-concepts.texi
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2020-01-10 15:13:40 +0100
committerLudovic Courtès <ludo@gnu.org>2020-01-13 11:06:01 +0100
commit38f14ce65d8d86a9a6acabc4e84df59f5eb13b04 (patch)
treefa0eeec9ea2a802474b0e74c203bff2f788ee86e /doc/ref/libguile-concepts.texi
parentbcba2132849bc395f716910e27a9273d1a152a9b (diff)
downloadguile-38f14ce65d8d86a9a6acabc4e84df59f5eb13b04.tar.gz
web: 'open-socket-for-uri' can verify the server's X.509 certificate.
This is largely based on Guix commit bc3c41ce36349ed4ec758c70b48a7059e363043a and subsequent changes to that code. * module/web/client.scm (x509-certificate-directory): New variable. (set-certificate-credentials-x509-trust-file!*) (make-credendials-with-ca-trust-files, peer-certificate) (assert-valid-server-certificate, print-tls-certificate-error): New procedures. <top level>: Add call to 'set-exception-printer!'. (tls-wrap): Add #:verify-certificate? parameter. When it is true, call 'make-credendials-with-ca-trust-files', pass it to 'set-session-credentials!', and call 'assert-valid-server-certificate'. (open-socket-for-uri): Add #:verify-certificate? parameter and pass it to 'tls-wrap'. (http-request): Add #:verify-certificate? parameter and pass it to 'open-socket-for-uri'. (define-http-verb): Add #:verify-certificate? parameter and pass it to 'http-request'. * doc/ref/web.texi (Web Client): Update documentation of 'open-socket-for-uri' and 'http-request'. Document 'x509-certificate-directory'.
Diffstat (limited to 'doc/ref/libguile-concepts.texi')
0 files changed, 0 insertions, 0 deletions