diff options
| author | Ingela Anderton Andin <[email protected]> | 2010-09-03 15:04:49 +0200 |
|---|---|---|
| committer | Ingela Anderton Andin <[email protected]> | 2010-09-06 14:52:50 +0200 |
| commit | 71e720e56888faa6da3856d5c5e08c8e983c9d5d (patch) | |
| tree | 5d04ed4f0ac8ce5ecf6855f2af9f7523d6adacc3 /lib/ssl/src/ssl_broker.erl | |
| parent | e752dcdefda84291cf819036a600b983326dae25 (diff) | |
| download | otp-71e720e56888faa6da3856d5c5e08c8e983c9d5d.tar.gz otp-71e720e56888faa6da3856d5c5e08c8e983c9d5d.tar.bz2 otp-71e720e56888faa6da3856d5c5e08c8e983c9d5d.zip | |
Handling of path validation errors by the application
Changed the behavior of the verify_fun option so that
the application can be responsible for handling path validation
errors even on the server side. Also replaced the not yet
documented validate_extensions_fun to be handled by the
verify_fun instead.
If the verify callback fun returns {fail, Reason}, the verification process is
immediately stopped and an alert is sent to the peer and the TLS/SSL
handshake is terminated. If the verify callback fun returns {valid,
UserState}, the verification process is continued. If the verify callback
fun always returns {valid, UserState}, the TLS/SSL handshake will not be
terminated with respect to verification failures and the connection
will be established. The verify callback fun will also be
able to verify application specific extensions.
Diffstat (limited to 'lib/ssl/src/ssl_broker.erl')
0 files changed, 0 insertions, 0 deletions