Skip to content

CURLOPT*ISSUERCERT*: not verified cryptographically - #22825

Closed
bagder wants to merge 2 commits into
masterfrom
bagder/issuer-cert-doc
Closed

bagder wants to merge 2 commits into
masterfrom
bagder/issuer-cert-doc

Conversation

@bagder

@bagder bagder commented Sep 4, 2026

Copy link
Copy Markdown
Member

Reported-by: Stanislav Fort

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The newly added sentences are ambiguous/potentially inaccurate about the nature of the issuer check and can mislead readers about whether the provided issuer cert is validated/trusted versus only used for an issuer-check operation.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates libcurl option documentation for the ISSUERCERT and PROXY_ISSUERCERT options (and their *_BLOB variants) to clarify what kind of issuer checking is performed.

Changes:

  • Adds a note describing how the provided issuer certificate is checked in relation to the peer/proxy certificate.
  • Reflows a few paragraphs for consistency/readability across the option pages.
File summaries
File Description
docs/libcurl/opts/CURLOPT_PROXY_ISSUERCERT.md Adds clarifying text about proxy issuer certificate checking semantics.
docs/libcurl/opts/CURLOPT_PROXY_ISSUERCERT_BLOB.md Same clarification as above for the blob-based proxy option, plus minor reflow.
docs/libcurl/opts/CURLOPT_ISSUERCERT.md Adds clarifying text about issuer certificate checking semantics.
docs/libcurl/opts/CURLOPT_ISSUERCERT_BLOB.md Same clarification as above for the blob-based option, plus minor reflow.
Review details
  • Files reviewed: 4/4 changed files
  • Comments generated: 4
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread docs/libcurl/opts/CURLOPT_ISSUERCERT.md Outdated
Comment thread docs/libcurl/opts/CURLOPT_ISSUERCERT_BLOB.md Outdated
Comment thread docs/libcurl/opts/CURLOPT_PROXY_ISSUERCERT.md Outdated
Comment thread docs/libcurl/opts/CURLOPT_PROXY_ISSUERCERT_BLOB.md Outdated
wording

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@bagder
bagder marked this pull request as ready for review September 4, 2026 08:16
@bagder bagder closed this in a226b5e Sep 4, 2026
@bagder
bagder deleted the bagder/issuer-cert-doc branch September 4, 2026 08:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants