Download
Browse source Changelog
Documentation
Project   Help us   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users curl-announce curl-commits Book: Everything curl Video presentations Report a bug Mail Etiquette
Development
Autobuilds Code Style Contribute Deprecate Internals Release Notes Release Procedure Roadmap Run Tests Security Process Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-library / Single Mail

curl-library

Allow empty CURLOPT_CAINFO when there is a valid CURLOPT_CAPATH

From: Alex Khouderchah via curl-library <curl-library_at_cool.haxx.se>
Date: Wed, 27 Feb 2019 16:11:05 -0800

Hey all,

It seems like CURLOPT_CAINFO is always required to refer to a valid cert
file (when we're actually verifying certs), whereas CURLOPT_CAPATH is
allowed to be empty or refer to a non-existent directory. I'm unclear why
this asymmetry exists. Is there a reason why CURLOPT_CAINFO shouldn't be
allowed to be empty/invalid if CURLOPT_CAPATH is valid?

Thanks,
Alex

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2019-02-28