[Emacs-diffs] trunk r115710: Document `gnutls-verify-error'.

[Teodor Zlatanov]

------------------------------------------------------------
revno: 115710
revision-id: address@hidden
parent: address@hidden
committer: Ted Zlatanov <address@hidden>
branch nick: quickfixes
timestamp: Mon 2013-12-23 07:50:47 -0500
message:
  Document `gnutls-verify-error'.
  
  * emacs-gnutls.texi (Help For Users): Document `gnutls-verify-error'.
modified:
  doc/misc/ChangeLog             changelog-20091113204419-o5vbwnq5f7feedwu-6331
  doc/misc/emacs-gnutls.texi     
emacsgnutls.texi-20120409130335-b4eu8jliwcg58u2g-1

=== modified file 'doc/misc/ChangeLog'
--- a/doc/misc/ChangeLog        2013-12-22 23:13:18 +0000
+++ b/doc/misc/ChangeLog        2013-12-23 12:50:47 +0000
@@ -1,3 +1,7 @@
+2013-12-23  Teodor Zlatanov  <address@hidden>
+
+       * emacs-gnutls.texi (Help For Users): Document `gnutls-verify-error'.
+
 2013-12-22  Glenn Morris  <address@hidden>
 
        * woman.texi (Navigation): Use itemx where appropriate.

=== modified file 'doc/misc/emacs-gnutls.texi'
--- a/doc/misc/emacs-gnutls.texi        2013-09-08 23:31:14 +0000
+++ b/doc/misc/emacs-gnutls.texi        2013-12-23 12:50:47 +0000
@@ -132,6 +132,24 @@
 of that platform.
 @end defvar
 
address@hidden gnutls-verify-error
+The @code{gnutls-verify-error} variable allows you to verify SSL/TLS
+server certificates for all connections or by host name.  It defaults
+to @code{nil} for now but will likely be changed to @code{t} later,
+meaning that all certificates will be verified.
+
+There are two checks available currently, that the certificate has
+been issued by a trusted authority as defined by
address@hidden, and that the hostname matches the
+certificate.  @code{t} enables both checks, but you can enable them
+individually as well with @code{:trustfiles} and @code{:hostname}
+instead.
+
+Because of the low-level interactions with the GnuTLS library, there
+is no way currently to ask if a certificate can be accepted.  You have
+to look in the @code{*Messages*} buffer.
address@hidden defvar
+
 @defvar gnutls-min-prime-bits
 The @code{gnutls-min-prime-bits} variable is a pretty exotic
 customization for cases where you want to refuse handshakes with keys