Download
Browse source Changelog tiny-curl
Documentation
Project   Bug Bounty FAQ   Help us   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Videos Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users IRC / chat Mailing lists Everything curl [book] Video presentations Report a bug Paid support
Development
Autobuilds Code review Code style Contribute Dashboard Deprecate Internals Release Notes Release Procedure Roadmap Run Tests Security Process Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-library / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: changed behavior of CURLOPT_SSL_VERIFYPEER + CURLOPT_CAINFO_BLOB (libcurl 7.87.0)

From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Sun, 29 Jan 2023 11:46:57 +0100 (CET)

On Fri, 27 Jan 2023, Ray Satiro via curl-library wrote:

> Since CURLOPT_CAINFO_BLOB is documented as "one or more certificates" [1] I
> don't think this is a bug however I've opened an issue [2] for further
> discussion.

> [2]: https://github.com/curl/curl/issues/10351

I've proposed a very small change to bring back the old behavior and support
"blank" blobs: https://github.com/curl/curl/pull/10359

We should then probably also document that CURLOPT_CAINFO_BLOB can in fact
also be used for *no* certs. 

-- 
  / daniel.haxx.se
  | Commercial curl support up to 24x7 is available!
  | Private help, bug fixes, support, ports, new features
  | https://curl.se/support.html
-- 
Unsubscribe: https://lists.haxx.se/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
Received on 2023-01-29