diff options
| author | Martin Willi <martin@revosec.ch> | 2013-03-07 14:10:50 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-03-07 14:10:50 +0100 |
| commit | 7d70a14779b2dc897bc46559e6475a9bd01b2be6 (patch) | |
| tree | 746bdedefd60fae4e6b010e5415919cff4140e32 /src/libtls/tls_server.h | |
| parent | 9d9042d6d95b0ecb292d77e7d8350fcd28e1aa27 (diff) | |
| parent | 1db6bf2f3f8fe0240a63dbd7c79323140daa622e (diff) | |
| download | strongswan-7d70a14779b2dc897bc46559e6475a9bd01b2be6.tar.bz2 strongswan-7d70a14779b2dc897bc46559e6475a9bd01b2be6.tar.xz | |
Merge branch 'pt-tls'
Diffstat (limited to 'src/libtls/tls_server.h')
| -rw-r--r-- | src/libtls/tls_server.h | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/src/libtls/tls_server.h b/src/libtls/tls_server.h index 6289dc8eb..d6b8de153 100644 --- a/src/libtls/tls_server.h +++ b/src/libtls/tls_server.h @@ -42,11 +42,16 @@ struct tls_server_t { /** * Create a tls_server instance. * + * If a peer identity is given, the client must authenticate with a valid + * certificate for this identity, or the connection fails. If peer is NULL, + * but the client authenticates nonetheless, the authenticated identity + * gets returned by tls_handshake_t.get_peer_id(). + * * @param tls TLS stack * @param crypto TLS crypto helper * @param alert TLS alert handler * @param server server identity - * @param peer peer identity + * @param peer peer identity, or NULL */ tls_server_t *tls_server_create(tls_t *tls, tls_crypto_t *crypto, tls_alert_t *alert, |