tls_config_verify3
Insecure tls configuration
Usage
#include <tls.h>
void
tls_config_verify(struct tls_config *config);
void
tls_config_insecure_noverifycert(struct tls_config *config);
void
tls_config_insecure_noverifyname(struct tls_config *config);
void
tls_config_insecure_noverifytime(struct tls_config *config);
Overview
These functions disable parts of the normal certificate verification process, resulting in insecure configurations. Be very careful when using them.
tls_config_insecure_noverifycert() disables certificate verification and OCSP validation.
tls_config_insecure_noverifyname() disables server name verification (client only).
tls_config_insecure_noverifytime() disables validity checking of certificates and OCSP validation.
tls_config_verify() reenables server name and certificate verification.
Releases
Unchanged in 3 releases since Debian 12 (Bookworm).