cURL / Mailing Lists / curl-library / Single Mail

curl-library

AW: AW: Difference between CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER?

From: Dr. Roger Cuypers <roger.cuypers_at_technisat.de>
Date: Mon, 13 Jul 2015 07:33:52 +0000

Does libcurl implement the former part via SSL_get_verify_result?

-----Ursprüngliche Nachricht-----
Von: curl-library [mailto:curl-library-bounces_at_cool.haxx.se] Im Auftrag von Daniel Stenberg
Gesendet: Freitag, 10. Juli 2015 11:29
An: libcurl development
Betreff: Re: AW: Difference between CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER?

On Wed, 8 Jul 2015, Dr. Roger Cuypers wrote:

> So simplified that means that verify peer has a similar functionality
> like SSL_get_verify_result in OpenSSL while verify host checks the common name?

Verify peer checks that the cert is signed by a CA, verify host makes sure the cert contains the server name.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2015-07-13