Re: using GnuTLS 3.x and certificate checks

[Christopher Schmidt]

Ted Zlatanov <address@hidden> writes:
> This would also be a good time to enable SSL certificate verification
> by default.

That's a great idea.

What do you think about a user-customizable verification mechanism?
This could be as simple as passing host, port and the PEM-encoded cert
chain to a regular function that will return non-nil if the verification
failed.

        Christopher