From: Giuseppe Scrivano <gscrivano@gnu.org>
Date: Thu, 7 Apr 2011 10:55:42 +0000 (+0200)
Subject: Allow X509 v1 certificates.
X-Git-Tag: v1.13~49
X-Git-Url: http://sjero.net/git/?p=wget;a=commitdiff_plain;h=0424cb1aed6a89061bb0bd5f75d2515dd8c8eb09

Allow X509 v1 certificates.
---

diff --git a/src/ChangeLog b/src/ChangeLog
index a973ddd3..efecdc82 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,8 @@
+2011-04-07  Giuseppe Scrivano  <gscrivano@gnu.org>
+
+	* gnutls.c (ssl_init): Allow X509 v1 certificates.
+	Suggested by: Ray Satiro <raysatiro@yahoo.com>
+
 2011-04-07  Ray Satiro  <raysatiro@yahoo.com> (tiny change)
 
 	(wgnutls_read): Check for the GNUTLS_E_AGAIN return code in the recv
diff --git a/src/gnutls.c b/src/gnutls.c
index 34a619ca..50957e5c 100644
--- a/src/gnutls.c
+++ b/src/gnutls.c
@@ -67,6 +67,8 @@ ssl_init ()
 
   gnutls_global_init ();
   gnutls_certificate_allocate_credentials (&credentials);
+  gnutls_certificate_set_verify_flags(credentials,
+                                      GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT);
 
   ca_directory = opt.ca_directory ? opt.ca_directory : "/etc/ssl/certs";