Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Re: Asynchronous certificate verification and curl_multi
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Stefan Eissing via curl-library <curl-library_at_lists.haxx.se>
Date: Wed, 13 Aug 2025 15:49:43 +0200
> Am 13.08.2025 um 15:16 schrieb Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>:
>
> On Wed, 13 Aug 2025, Ondra via curl-library wrote:
>
>> Hello, Since I do not really know the code it is hard for me to say whether simply running curl_multi_socket_action with CURL_SOCKET_TIMEOUT would work and be an acceptable solution for you, or whether adding something new (CURL_SOCKET_RETRY_CONNECT similar to CURL_SOCKET_TIMEOUT?) would be the correct approach. Additionally both of these solutions only work for curl_multi, although I think that for curl_easy_perform most people will just block within the callback...
>
> Shouldn't the callback pause the transfer when it can't verify the certificate right now but thinks it will magically have information in the future.
>
> Then in a future when it has the information it resumes/unpauses the handle again?
The pause/unpause is currently not observed when connecting. We would have to fix that.
>
> --
>
> / daniel.haxx.se || https://rock-solid.curl.dev
> --
> Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
> Etiquette: https://curl.se/mail/etiquette.html
Date: Wed, 13 Aug 2025 15:49:43 +0200
> Am 13.08.2025 um 15:16 schrieb Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>:
>
> On Wed, 13 Aug 2025, Ondra via curl-library wrote:
>
>> Hello, Since I do not really know the code it is hard for me to say whether simply running curl_multi_socket_action with CURL_SOCKET_TIMEOUT would work and be an acceptable solution for you, or whether adding something new (CURL_SOCKET_RETRY_CONNECT similar to CURL_SOCKET_TIMEOUT?) would be the correct approach. Additionally both of these solutions only work for curl_multi, although I think that for curl_easy_perform most people will just block within the callback...
>
> Shouldn't the callback pause the transfer when it can't verify the certificate right now but thinks it will magically have information in the future.
>
> Then in a future when it has the information it resumes/unpauses the handle again?
The pause/unpause is currently not observed when connecting. We would have to fix that.
>
> --
>
> / daniel.haxx.se || https://rock-solid.curl.dev
> --
> Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
> Etiquette: https://curl.se/mail/etiquette.html
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2025-08-13