Skip to content

setopt: gate a few proxy TLS options by checking backend support#21514

Closed
bagder wants to merge 1 commit into
masterfrom
bagder/setopt-proxy
Closed

setopt: gate a few proxy TLS options by checking backend support#21514
bagder wants to merge 1 commit into
masterfrom
bagder/setopt-proxy

Conversation

@bagder
Copy link
Copy Markdown
Member

@bagder bagder commented May 6, 2026

The same way the corresponding non-proxy options are checked.

The same way the corresponding non-proxy options are checked.
@bagder bagder marked this pull request as ready for review May 6, 2026 21:43
@bagder bagder requested a review from Copilot May 6, 2026 21:53
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR aligns proxy TLS option handling with the existing behavior of the corresponding non-proxy options by rejecting settings that the selected TLS backend does not support (returning CURLE_NOT_BUILT_IN).

Changes:

  • Gate CURLOPT_PROXY_CRLFILE behind Curl_ssl_supports(..., SSLSUPP_CRLFILE).
  • Gate CURLOPT_PROXY_ISSUERCERT behind Curl_ssl_supports(..., SSLSUPP_ISSUERCERT).
  • Gate CURLOPT_PROXY_ISSUERCERT_BLOB behind Curl_ssl_supports(..., SSLSUPP_ISSUERCERT_BLOB).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@bagder bagder closed this in a946fbb May 7, 2026
@bagder bagder deleted the bagder/setopt-proxy branch May 7, 2026 05:58
outcast36 pushed a commit to greearb/curl that referenced this pull request Jun 3, 2026
The same way the corresponding non-proxy options are checked.

Closes curl#21514
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants