Skip to content

Commit

Permalink
Remove obsolete GnuTLS FIXME comment
Browse files Browse the repository at this point in the history
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
  • Loading branch information
David Woodhouse authored and David Woodhouse committed Jun 11, 2012
1 parent 929b7da commit 80beecc
Showing 1 changed file with 0 additions and 12 deletions.
12 changes: 0 additions & 12 deletions gnutls.c
Expand Up @@ -1133,7 +1133,6 @@ int openconnect_open_https(struct openconnect_info *vpninfo)
#endif
gnutls_certificate_set_verify_function (vpninfo->https_cred,
verify_peer);
/* FIXME: Ensure TLSv1.0, no options */

if (vpninfo->cafile) {
err = gnutls_certificate_set_x509_trust_file(vpninfo->https_cred,
Expand All @@ -1156,17 +1155,6 @@ int openconnect_open_https(struct openconnect_info *vpninfo)
return err;
}
}

/* We just want to do:
SSL_CTX_set_purpose(vpninfo->https_ctx, X509_PURPOSE_ANY);
... but it doesn't work with OpenSSL < 0.9.8k because of
problems with inheritance (fixed in v1.1.4.6 of
crypto/x509/x509_vpm.c) so we have to play silly buggers
instead. This trick doesn't work _either_ in < 0.9.7 but
I don't know of _any_ workaround which will, and can't
be bothered to find out either. */


}
gnutls_init (&vpninfo->https_sess, GNUTLS_CLIENT);
gnutls_session_set_ptr (vpninfo->https_sess, (void *) vpninfo);
Expand Down

0 comments on commit 80beecc

Please sign in to comment.