Sets the certificate database that is used to verify peer certificates.
This is set to the default database by default. See get_default_database. If set to null, then peer certificate validation will always set the g_tls_certificate_unknown_ca error (meaning accept_certificate will always be emitted on client-side connections, unless that bit is not set in validation_flags).
There are nonintuitive security implications when using a non-default database. See database for details.
this | |
database |