On Fri, 2 Nov 2018, Basuke Suzuki via curl-library wrote:

> Let me make understanding clear who you proposed.
>
> - Add new CURLINFO_SSL_VERIFIED.
> - Basically similar to existing CURLINFO_SSL_VERIFYRESULT
> - Returns only CURLcode

I think it should introduce a new line of TLS error codes that provide
additional information for the case when CURLE_PEER_FAILED_VERIFICATION is
returned.

Something like:

  CURLVERIFIED_HOSTFAIL,
  CURLVERIFIED_SIGNATUREFAIL,
  ...

> - All backend need to implement this by hand

We could perhaps have a CURLVERIFIED_MISSING code to return for the backends
that don't yet have additional details implemented.

> Are these what you proposed?

Yes, with my minor clarifications here.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html