CVE-2016-2113(<=4.3): docs-xml: add "tls verify peer" option defaulting to "no_check"

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Ralph Boehme <slow@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/lib/param/param_table.c b/lib/param/param_table.c
index e66c4d5e397773999bc9e28ba70656ae71bd7e65..09d0fe9181bbe1a8631f364ea7427eb9ba476424 100644 (file)
--- a/lib/param/param_table.c
+++ b/lib/param/param_table.c
@@ -4484,6 +4484,14 @@ struct parm_struct parm_table[] = {
                .special        = NULL,
                .enum_list      = NULL
        },
+       {
+               .label          = "tls verify peer",
+               .type           = P_ENUM,
+               .p_class        = P_GLOBAL,
+               .offset         = GLOBAL_VAR(tls_verify_peer),
+               .special        = NULL,
+               .enum_list      = enum_tls_verify_peer_vals,
+       },
 
        {NULL,  P_BOOL,  P_NONE,  0,  NULL,  NULL,  0}
 };