From be5cf34ec97ce5a66160e21dc039b7f66dc600bd Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Fri, 9 May 2014 20:07:36 +0200
Subject: Added gnutls-serv option --verify-client-cert.

That option allows forcing verification of the provided certificate
even if it is not required to present one. In that case the connection
will be closed with a fatal alert.
---
 src/serv-args.def | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/serv-args.def')

diff --git a/src/serv-args.def b/src/serv-args.def
index 1caf7006ed..141984a52d 100644
--- a/src/serv-args.def
+++ b/src/serv-args.def
@@ -82,6 +82,13 @@ flag = {
     doc      = "";
 };
 
+flag = {
+    name      = verify-client-cert;
+    disabled;
+    descrip   = "If a client certificate is sent then verify it.";
+    doc      = "Do not require, but if a client certificate is sent then verify it and close the connection if invalid.";
+};
+
 flag = {
     name      = heartbeat;
     value     = b;
-- 
cgit v1.2.1