Join GitHub today
GitHub is home to over 20 million developers working together to host and review code, manage projects, and build software together.
Documentation is missing for CURLINFO_SSL_VERIFYRESULT #2400
Comments
bagder
added
SSL/TLS
documentation
labels
Mar 19, 2018
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment
bagder
Mar 20, 2018
Member
Yeah, the example seems reversed... and from all I can tell, CURLINFO_SSL_VERIFYRESULT is only set by the NSS and OpenSSL/libressl/boringssl backends...
|
Yeah, the example seems reversed... and from all I can tell, |
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
Show comment Hide comment
bagder
Mar 21, 2018
Member
The value is specific for the TLS backend curl is built to use so I don't think we will document the values any further than so. To get a feel for what the values mean in OpenSSL, check out their x509_vfy.h file.
|
The value is specific for the TLS backend curl is built to use so I don't think we will document the values any further than so. To get a feel for what the values mean in OpenSSL, check out their x509_vfy.h file. |
komar007 commentedMar 19, 2018
The documentation for CURLINFO_SSL_VERIFYRESULT (
docs/libcurl/opts/CURLINFO_SSL_VERIFYRESULT.3) does not explain the meaning of the value stored in the third argument ofcurl_easy_getinfo.The source code suggests that 0 means success, non-zero - verification error.
It also seems that the example given contradicts the actual behavior of the library, printing "fine" on verification error, and "BAAAD" when the verification is ok.