New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Documentation is missing for CURLINFO_SSL_VERIFYRESULT #2400

Closed
komar007 opened this Issue Mar 19, 2018 · 2 comments

Comments

Projects
None yet
2 participants
@komar007
Copy link

komar007 commented Mar 19, 2018

The documentation for CURLINFO_SSL_VERIFYRESULT (docs/libcurl/opts/CURLINFO_SSL_VERIFYRESULT.3) does not explain the meaning of the value stored in the third argument of curl_easy_getinfo.
The source code suggests that 0 means success, non-zero - verification error.
It also seems that the example given contradicts the actual behavior of the library, printing "fine" on verification error, and "BAAAD" when the verification is ok.

@bagder

This comment has been minimized.

Copy link
Member

bagder commented Mar 20, 2018

Yeah, the example seems reversed... and from all I can tell, CURLINFO_SSL_VERIFYRESULT is only set by the NSS and OpenSSL/libressl/boringssl backends...

@bagder

This comment has been minimized.

Copy link
Member

bagder commented Mar 21, 2018

The value is specific for the TLS backend curl is built to use so I don't think we will document the values any further than so. To get a feel for what the values mean in OpenSSL, check out their x509_vfy.h file.

@bagder bagder closed this in 3ff09ce Mar 21, 2018

@lock lock bot locked as resolved and limited conversation to collaborators Jun 19, 2018

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.