mirrors/emacs
1
Fork 0
mirror of git://git.sv.gnu.org/emacs.git synced 2026-01-05 19:31:02 -08:00
Code Issues Projects Releases Wiki Activity

Always check for client-certificates

Browse source 
* lisp/net/network-stream.el
(network-stream-use-client-certificates): New user option.
(open-network-stream): If 'network-stream-use-client-certificates'
is t, and the user hasn't specified :client-certificate, do
certificate lookups via 'auth-source'.
(network-stream-certificate): Only return key and certificate
files that exist.

* doc/lispref/processes.texi (Network): Document new
client-certificate behavior.

* etc/NEWS: Document 'network-stream-use-client-certificates'.
This commit is contained in:
Robert Pluim 2019-01-24 14:35:30 +01:00
parent 3843711abd
commit 91c732f687
3 changed files with 36 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
doc/lispref/processes.texi
View file

@ -2516,12 +2516,16 @@ Emacs will warn if the connection isn't encrypted. This is useful for
protocols like @acronym{IMAP} and the like, where most users would
expect the network traffic to be encrypted.
@vindex network-stream-use-client-certificates
@item :client-certificate @var{list-or-t}
Either a list of the form @code{(@var{key-file} @var{cert-file})},
naming the certificate key file and certificate file itself, or
@code{t}, meaning to query @code{auth-source} for this information
(@pxref{Top,,Overview, auth, The Auth-Source Manual}).
Only used for @acronym{TLS} or @acronym{STARTTLS}.
(@pxref{Help for users,,auth-source, auth, Emacs auth-source Library}).
Only used for @acronym{TLS} or @acronym{STARTTLS}. If
@code{:client-certificate} is not specified, behave as if it were t,
customize @code{network-stream-use-client-certificates} to change
this.
@item :return-list @var{cons-or-nil}
The return value of this function. If omitted or @code{nil}, return a