Re: [PATCH RFC] GnuTLS: Support TOFU certificate checking.

[Toke Høiland-Jørgensen]

Lars Magne Ingebrigtsen <address@hidden> writes:

> I think it would also be nice if the entire cert was also returned (in
> a convenient format), so that Emacs can display the pertinent parts
> while querying the user about what action to take.

Okay, so basically a property list with everything that might be
interesting? Or did you mean a text string?

> And perhaps display graphically the fingerprint like ssh does? I have
> no idea what's involved there, so I don't know whether that would be
> possible (or easy)...

Well, gnutls-cli displays one of those as well. So I suppose it has a
way to do that; the question is whether it's exposed in the API
somewhere. I'll go poking around. Can't promise anything about when,
though; had expected this to be a small patch that would just be enough
for me to stop using gnutls-cli to get TOFU trust... ;)

-Toke