From: Ralph Boehme <slow@samba.org>
Date: Fri, 18 Mar 2016 08:37:06 +0000 (+0100)
Subject: CVE-2016-2113(<=4.3): docs-xml: add "tls verify peer" option defaulting to "no_check"
X-Git-Tag: samba-4.2.10~149
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d2d22368f9556757a1ee8d0d3ccf61ca95878138;p=thirdparty%2Fsamba.git

CVE-2016-2113(<=4.3): docs-xml: add "tls verify peer" option defaulting to "no_check"

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Ralph Boehme <slow@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
---

diff --git a/lib/param/param_table.c b/lib/param/param_table.c
index e66c4d5e397..09d0fe9181b 100644
--- a/lib/param/param_table.c
+++ b/lib/param/param_table.c
@@ -4484,6 +4484,14 @@ struct parm_struct parm_table[] = {
 		.special	= NULL,
 		.enum_list	= NULL
 	},
+	{
+		.label		= "tls verify peer",
+		.type		= P_ENUM,
+		.p_class	= P_GLOBAL,
+		.offset		= GLOBAL_VAR(tls_verify_peer),
+		.special	= NULL,
+		.enum_list	= enum_tls_verify_peer_vals,
+	},
 
 	{NULL,  P_BOOL,  P_NONE,  0,  NULL,  NULL,  0}
 };