summaryrefslogtreecommitdiff
path: root/doc/cha-gtls-app.texi
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2016-12-10 13:15:16 +0100
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2016-12-10 13:27:57 +0100
commitfac99985e8ab28d4c12ca70469e3e74037befdfd (patch)
tree3520165835cc6bbe793302cbb7b906bb8b4771ec /doc/cha-gtls-app.texi
parent0391602c3f95b8c0e6e7636f6a54880916057aa9 (diff)
downloadgnutls-fac99985e8ab28d4c12ca70469e3e74037befdfd.tar.gz
doc update [ci skip]
Diffstat (limited to 'doc/cha-gtls-app.texi')
-rw-r--r--doc/cha-gtls-app.texi5
1 files changed, 4 insertions, 1 deletions
diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi
index 94dd5e4eca..cb75e4be70 100644
--- a/doc/cha-gtls-app.texi
+++ b/doc/cha-gtls-app.texi
@@ -634,8 +634,11 @@ signed by server's acceptable signers.
Certificate verification is possible by loading the trusted
authorities into the credentials structure by using
the following functions, applicable to X.509 and OpenPGP certificates.
+In modern systems it is recommended to utilize @funcref{gnutls_certificate_set_x509_system_trust}
+which will load the trusted authorities from the system store.
-@showfuncD{gnutls_certificate_set_x509_system_trust,gnutls_certificate_set_x509_trust_file,gnutls_certificate_set_x509_trust_dir,gnutls_certificate_set_openpgp_keyring_file}
+@showfuncdesc{gnutls_certificate_set_x509_system_trust}
+@showfuncC{gnutls_certificate_set_x509_trust_file,gnutls_certificate_set_x509_trust_dir,gnutls_certificate_set_openpgp_keyring_file}
The peer's certificate will be automatically verified if
@funcref{gnutls_session_set_verify_cert} is called prior to handshake.