From: Volker Lendecke <vl@samba.org>
Date: Mon, 4 Aug 2025 11:53:49 +0000 (+0200)
Subject: tls: Add tstream_tls_params_verify_peer()
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0553b839f8ed68ae13a98d276e1889093c6a6814;p=thirdparty%2Fsamba.git

tls: Add tstream_tls_params_verify_peer()

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
---

diff --git a/source4/lib/tls/tls.h b/source4/lib/tls/tls.h
index 5c6ab3b2e22..3a0035723f2 100644
--- a/source4/lib/tls/tls.h
+++ b/source4/lib/tls/tls.h
@@ -90,6 +90,8 @@ NTSTATUS tstream_tls_params_server_lpcfg(TALLOC_CTX *mem_ctx,
 
 bool tstream_tls_params_enabled(struct tstream_tls_params *params);
 bool tstream_tls_params_quic_enabled(struct tstream_tls_params *params);
+enum tls_verify_peer_state tstream_tls_params_verify_peer(
+	struct tstream_tls_params *tls_params);
 const char *tstream_tls_params_peer_name(
 	const struct tstream_tls_params *params);
 
diff --git a/source4/lib/tls/tls_tstream.c b/source4/lib/tls/tls_tstream.c
index 903ae5404a4..39ecade1898 100644
--- a/source4/lib/tls/tls_tstream.c
+++ b/source4/lib/tls/tls_tstream.c
@@ -920,6 +920,22 @@ bool tstream_tls_params_quic_enabled(struct tstream_tls_params *tls_params)
 	return quic;
 }
 
+enum tls_verify_peer_state tstream_tls_params_verify_peer(
+	struct tstream_tls_params *tls_params)
+{
+#ifdef HAVE_LIBQUIC
+
+	struct tstream_tls_params_internal *tlsp = tls_params->internal;
+
+	return tlsp->verify_peer;
+
+#else /* HAVE_LIBQUIC */
+
+	return TLS_VERIFY_PEER_NO_CHECK;
+
+#endif /* HAVE_LIBQUIC */
+}
+
 const char *tstream_tls_params_peer_name(
 	const struct tstream_tls_params *params)
 {