propagate the error of the verify callback.

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 842caf10bc665018c09db01babcf859de2699fac..47d2ed0517339c3d23074726c28d112211c088b5 100644 (file)
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -2497,7 +2497,9 @@ static int run_verify_callback(gnutls_session_t session, unsigned int side)
   if (cred != NULL && cred->verify_callback != NULL)
     {
       ret = cred->verify_callback (session);
-      if (ret != 0)
+      if (ret < -1)
+        return ret;
+      else if (ret != 0)
         return GNUTLS_E_CERTIFICATE_ERROR;
     }