Skip to content

CURLOPT_SSL_CTX_FUNCTION.md: client cert caveats - #22899

Closed
bagder wants to merge 1 commit into
masterfrom
bagder/sslctx-clientcert
Closed

bagder wants to merge 1 commit into
masterfrom
bagder/sslctx-clientcert

Conversation

@bagder

@bagder bagder commented Sep 10, 2026

Copy link
Copy Markdown
Member

Basically this option is one big footgun

@icing

This comment was marked as resolved.

@bagder
bagder requested a balanced review from Copilot September 10, 2026 09:08
@bagder
bagder marked this pull request as ready for review September 10, 2026 09:09

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The TLS session warning incorrectly states that session reuse bypasses the callback.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Clarifies risks and lifecycle behavior of the SSL context callback.

Changes:

  • Documents invocation across DoH, redirects, and parallel connections.
  • Adds connection and client-certificate reuse warnings.
File summaries
File Description
docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.md Expands callback reuse and security caveats.
Review details
  • Files reviewed: 1/1 changed files
  • Comments generated: 1
  • Review effort level: Balanced

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.md Outdated
Basically this option is one big footgun

Closes #22899
@bagder
bagder force-pushed the bagder/sslctx-clientcert branch from ba5c51e to 15aa04d Compare September 10, 2026 11:50
@bagder bagder closed this in 5ddf5f9 Sep 10, 2026
@bagder
bagder deleted the bagder/sslctx-clientcert branch September 10, 2026 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

3 participants