From 0424cb1aed6a89061bb0bd5f75d2515dd8c8eb09 Mon Sep 17 00:00:00 2001
From: Giuseppe Scrivano <gscrivano@gnu.org>
Date: Thu, 7 Apr 2011 12:55:42 +0200
Subject: [PATCH] Allow X509 v1 certificates.

---
 src/ChangeLog | 5 +++++
 src/gnutls.c  | 2 ++
 2 files changed, 7 insertions(+)

diff --git a/src/ChangeLog b/src/ChangeLog
index a973ddd3..efecdc82 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,8 @@
+2011-04-07  Giuseppe Scrivano  <gscrivano@gnu.org>
+
+	* gnutls.c (ssl_init): Allow X509 v1 certificates.
+	Suggested by: Ray Satiro <raysatiro@yahoo.com>
+
 2011-04-07  Ray Satiro  <raysatiro@yahoo.com> (tiny change)
 
 	(wgnutls_read): Check for the GNUTLS_E_AGAIN return code in the recv
diff --git a/src/gnutls.c b/src/gnutls.c
index 34a619ca..50957e5c 100644
--- a/src/gnutls.c
+++ b/src/gnutls.c
@@ -67,6 +67,8 @@ ssl_init ()
 
   gnutls_global_init ();
   gnutls_certificate_allocate_credentials (&credentials);
+  gnutls_certificate_set_verify_flags(credentials,
+                                      GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT);
 
   ca_directory = opt.ca_directory ? opt.ca_directory : "/etc/ssl/certs";