--- curl-7.19.7/include/curl/curl.h 2009-10-17 20:31:50.000000000 +0200 +++ curl-7.19.7-new/include/curl/curl.h 2009-11-23 11:42:28.000000000 +0100 @@ -608,6 +608,24 @@ CURLFTPMETHOD_LAST /* not an option, never use */ } curl_ftpmethod; +/* This option determines whether libcurl verifies that the server cert + is for the server it is known as. */ +typedef enum curl_ssl_verifyhost { + CURL_SSL_VERIFYHOST_IGNORE_NAME = 0, + /* The connection succeeds regardless of the names in the + certificate. */ + CURL_SSL_VERIFYHOST_HAS_NAME = 1, + /* The certificate must contain a Common Name field, but it doesn't + matter what name it says. */ + CURL_SSL_VERIFYHOST_NAME_MATCH_URL = 2 + /* The certificate must indicate that the server is the server to + which we meant to connect, or the connection fails. Consider the + server the intended one when the Common Name field or a Subject + Alternate Name field in the certificate matches the host name in + the URL to which you told Curl to connect. This is the default + since version 7.10. */ +} curl_ssl_verifyhost; + /* CURLPROTO_ defines are for the CURLOPT_*PROTOCOLS options */ #define CURLPROTO_HTTP (1<<0) #define CURLPROTO_HTTPS (1<<1)