Added gnutls-serv option --verify-client-cert.

That option allows forcing verification of the provided certificate
even if it is not required to present one. In that case the connection
will be closed with a fatal alert.

1 files changed, 7 insertions, 0 deletions

diff --git a/src/serv-args.def b/src/serv-args.def
index 1caf7006ed..141984a52d 100644
--- a/src/serv-args.def
+++ b/src/serv-args.def
@@ -83,6 +83,13 @@ flag = {
 };
 
 flag = {
+    name      = verify-client-cert;
+    disabled;
+    descrip   = "If a client certificate is sent then verify it.";
+    doc      = "Do not require, but if a client certificate is sent then verify it and close the connection if invalid.";
+};
+
+flag = {
     name      = heartbeat;
     value     = b;
     descrip   = "Activate heartbeat support";