New verify-error GnuTLS interface for certificate validation

* net/gnutls.el (gnutls-verify-error): New defcustom to control
the behavior when a certificate fails validation.  Defaults to
old behavior: never abort, just warn.
(gnutls-negotiate): Use it.

* gnutls.c: Replace `:verify_hostname_error' with `:verify_error',
now a list of certificate validation checks that will abort a
connection with an error.
(Fgnutls_boot): Document it and use it.

1 files changed, 7 insertions, 0 deletions

diff --git a/src/ChangeLog b/src/ChangeLog
index 80367c81166..081a6b8631c 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,10 @@
+2013-12-14  Teodor Zlatanov  <tzz@lifelogs.com>
+
+        * gnutls.c: Replace `:verify_hostname_error' with `:verify_error',
+        now a list of certificate validation checks that will abort a
+        connection with an error.
+        (Fgnutls_boot): Document it and use it.
+
 2013-12-14  Martin Rudalics  <rudalics@gmx.at>
 
         * w32term.c (w32_enable_frame_resize_hack): New variable.