Skip to content

Commit 1177c26

Browse files
committed
tlshd: Remove useless verification status report
The verification routine has already succeeded. The verification status report shows only: The certificate is trusted. If the handshake is successful, that is obvious. Signed-off-by: Chuck Lever <[email protected]>
1 parent 058f257 commit 1177c26

File tree

2 files changed

+0
-14
lines changed

2 files changed

+0
-14
lines changed

src/tlshd/client.c

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -207,9 +207,7 @@ static int tlshd_client_x509_verify_function(gnutls_session_t session,
207207
struct tlshd_handshake_parms *parms)
208208
{
209209
const gnutls_datum_t *peercerts;
210-
gnutls_certificate_type_t type;
211210
unsigned int i, status;
212-
gnutls_datum_t out;
213211
int ret;
214212

215213
ret = gnutls_certificate_verify_peers3(session, parms->peername,
@@ -218,12 +216,6 @@ static int tlshd_client_x509_verify_function(gnutls_session_t session,
218216
tlshd_log_gnutls_error(ret);
219217
return GNUTLS_E_CERTIFICATE_ERROR;
220218
}
221-
222-
type = gnutls_certificate_type_get(session);
223-
gnutls_certificate_verification_status_print(status, type, &out, 0);
224-
tlshd_log_debug("%s", out.data);
225-
gnutls_free(out.data);
226-
227219
if (status)
228220
return GNUTLS_E_CERTIFICATE_ERROR;
229221

src/tlshd/server.c

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -145,9 +145,7 @@ static int tlshd_server_x509_verify_function(gnutls_session_t session,
145145
struct tlshd_handshake_parms *parms)
146146
{
147147
const gnutls_datum_t *peercerts;
148-
gnutls_certificate_type_t type;
149148
unsigned int i, status;
150-
gnutls_datum_t out;
151149
int ret;
152150

153151
ret = gnutls_certificate_verify_peers3(session, NULL, &status);
@@ -161,10 +159,6 @@ static int tlshd_server_x509_verify_function(gnutls_session_t session,
161159
tlshd_log_gnutls_error(ret);
162160
goto certificate_error;
163161
}
164-
type = gnutls_certificate_type_get(session);
165-
gnutls_certificate_verification_status_print(status, type, &out, 0);
166-
tlshd_log_debug("%s", out.data);
167-
gnutls_free(out.data);
168162
if (status)
169163
goto certificate_error;
170164

0 commit comments

Comments
 (0)