Documentation is missing for CURLINFO_SSL_VERIFYRESULT #2400

Closed
komar007 opened this Issue Mar 19, 2018 · 2 comments

Comments

Projects
None yet
2 participants
@komar007

The documentation for CURLINFO_SSL_VERIFYRESULT (docs/libcurl/opts/CURLINFO_SSL_VERIFYRESULT.3) does not explain the meaning of the value stored in the third argument of curl_easy_getinfo.
The source code suggests that 0 means success, non-zero - verification error.
It also seems that the example given contradicts the actual behavior of the library, printing "fine" on verification error, and "BAAAD" when the verification is ok.

@bagder

This comment has been minimized.

Show comment Hide comment
@bagder

bagder Mar 20, 2018

Member

Yeah, the example seems reversed... and from all I can tell, CURLINFO_SSL_VERIFYRESULT is only set by the NSS and OpenSSL/libressl/boringssl backends...

Member

bagder commented Mar 20, 2018

Yeah, the example seems reversed... and from all I can tell, CURLINFO_SSL_VERIFYRESULT is only set by the NSS and OpenSSL/libressl/boringssl backends...

@bagder

This comment has been minimized.

Show comment Hide comment
@bagder

bagder Mar 21, 2018

Member

The value is specific for the TLS backend curl is built to use so I don't think we will document the values any further than so. To get a feel for what the values mean in OpenSSL, check out their x509_vfy.h file.

Member

bagder commented Mar 21, 2018

The value is specific for the TLS backend curl is built to use so I don't think we will document the values any further than so. To get a feel for what the values mean in OpenSSL, check out their x509_vfy.h file.

@bagder bagder closed this in 3ff09ce Mar 21, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment