Re: [gnutls-dev] [PATCH] Certificate selection fixes

[Ludovic Courtès]

Hi Simon,

Simon Josefsson <address@hidden> writes:

> Thanks.  For reference, how did you trigger or found this problem?

While trying to understand why I could not get the `RSA_NULL_MD5' cipher
suite to work.  At some point I was getting misleading error messages
(such as "Decryption failed") so I started browsing that part of the
code.

> Bonus points if you answer in the form of a patch with a NEWS entry.. ;)

See attached file.  I hope it'll be good enough for me to get the bonus
point.  :-)

Thanks,
Ludovic.

>From c634c9dcead7897b764e752d00034331b9a83f97 Mon Sep 17 00:00:00 2001
From: =?utf-8?q?Ludovic=20Court=C3=A8s?= <address@hidden>
Date: Thu, 2 Aug 2007 10:00:27 +0200
Subject: [PATCH] Updated `NEWS'.

---
 NEWS |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/NEWS b/NEWS
index 0b716dd..43143ae 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,12 @@ Copyright (C) 2004, 2005, 2006, 2007 Simon Josefsson
 Copyright (C) 2000, 2001, 2002, 2003, 2004 Nikos Mavroyanopoulos
 See the end for copying conditions.
 
+* Version 1.7.16 (unreleased)
+
+** Fix sanity checks and return values in certificate selection.
+In some cases, GnuTLS omitted to report suitable error codes when no
+suitable certificate was found.
+
 * Version 1.7.15 (released 2007-07-02)
 
 ** Fix self-tests key-id under mingw32.
-- 
1.5.2.4