From: Jens Schmidt <jschmidt4gnu@vodafonemail.de>
Date: Mon, 5 May 2025 11:47:17 +0000 (+0200)
Subject: Require key and cert when searching for client cert
X-Git-Url: http://git.eshelyaron.com/gitweb/?a=commitdiff_plain;h=572553c0373ecb9d0c1787e5c236c47a226c29d5;p=emacs.git

Require key and cert when searching for client cert

* lisp/net/network-stream.el (network-stream-certificate):
Require :key and :cert when searching auth sources for a client
certificate.  (Bug#78189)

(cherry picked from commit d11570d80ee18932ffb0ceed552313ada2879bcb)
---

diff --git a/lisp/net/network-stream.el b/lisp/net/network-stream.el
index 1bd960025aa..93f3682883a 100644
--- a/lisp/net/network-stream.el
+++ b/lisp/net/network-stream.el
@@ -249,7 +249,8 @@ gnutls-boot (as returned by `gnutls-boot-parameters')."
               (ignore-errors
                 (car (auth-source-search :max 1
                                          :host host
-                                         :port (format "%s" service)))))
+                                         :port (format "%s" service)
+                                         :require '(:key :cert)))))
 	     (key (plist-get auth-info :key))
 	     (cert (plist-get auth-info :cert)))
 	(and key cert (file-readable-p key) (file-readable-p cert)