CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/20 11:26:14
Modified files:
lib/libtls : Symbols.list tls.c tls.h tls_conninfo.c
tls_internal.h tls_peer.c
lib/libtls/man : tls_conn_version.3
regress/lib/libtls/tls: Makefile tlstest.c
Log message:
Provide both the peer's unverified bundle, and the verified chain.
Our tls_peer_cert_chain_pem was always the full bundle of unverified
certificates sent by the peer, which can certainly violate the
principle of least astonishment.
Provide tls_peer_cert_bundle_unverified_pem and
tls_peer_cert_chain_verified_pem and adjust the documentation for both
to indicate what they are returning.
We also indicate that tls_peer_cert_chain_pem returns the unverified bundle
and may go away in a future release.
