Enable strict TLS certificate checks by default

This commit is contained in:
Alexander Krotov
2020-06-05 08:33:55 +03:00
committed by holger krekel
parent d97d9980dd
commit 6d9ff3d248
4 changed files with 14 additions and 22 deletions

View File

@@ -3793,9 +3793,10 @@ int64_t dc_lot_get_timestamp (const dc_lot_t* lot);
*/
/**
* Configure certificate checks automatically.
* Accept invalid certificates, including self-signed ones
* or having incorrect hostname.
*/
#define DC_CERTCK_AUTO 0
#define DC_CERTCK_ACCEPT_INVALID_CERTIFICATES 0
/**
* Strictly check TLS certificates;
@@ -3803,12 +3804,6 @@ int64_t dc_lot_get_timestamp (const dc_lot_t* lot);
*/
#define DC_CERTCK_STRICT 1
/**
* Accept invalid certificates, including self-signed ones
* or having incorrect hostname.
*/
#define DC_CERTCK_ACCEPT_INVALID_CERTIFICATES 3
/**
* @}
*/