From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Mon, 13 Jan 2014 10:12:39 +0000 (+0100)
Subject: verification profiles can be set individually as well.
X-Git-Tag: gnutls_3_3_0pre0~352
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=50e740952345ca3f4d2adc2d3ef560b9cc97b201;p=thirdparty%2Fgnutls.git

verification profiles can be set individually as well.
---

diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
index 152efc43b6..2bfd4e8c2e 100644
--- a/lib/gnutls_priority.c
+++ b/lib/gnutls_priority.c
@@ -1111,6 +1111,34 @@ gnutls_priority_init(gnutls_priority_t * priority_cache,
 			} else if (strcasecmp(&broken_list[i][1],
 					      "SERVER_PRECEDENCE") == 0) {
 				(*priority_cache)->server_precedence = 1;
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_LOW") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_LOW);
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_LEGACY") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_LEGACY);
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_NORMAL") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_NORMAL);
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_HIGH") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_HIGH);
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_ULTRA") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_ULTRA);
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_SUITEB128") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_SUITEB128);
+			} else if (strcasecmp(&broken_list[i][1],
+					      "PROFILE_SUITEB192") == 0) {
+				(*priority_cache)->additional_verify_flags &= 0x00ffffff;
+				(*priority_cache)->additional_verify_flags |= GNUTLS_VFLAGS_TO_PROFILE(GNUTLS_PROFILE_SUITEB192);
 			} else if (strcasecmp(&broken_list[i][1],
 					      "NEW_PADDING") == 0) {
 				(*priority_cache)->new_record_padding = 1;