Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Fewer promises to abide to CA changes in connection reuse
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Tue, 20 Oct 2026 17:50:49 +0200 (CEST)
Hi,
One of the more popular nits the AIs find and report in curl these days are
minor prolems when libcurl reuses a connection even though some minor TLS/CA
related option was changed compared to how the option was set when the
connection was setup.
I want to loosen up our rules around this because I don't think we need them
and I don't think users actually toggle and change all those options in the
same handle and even if they do, they don't get hurt if such connections are
reused.
Feel free to tell me you think I'm wrong!
Then maybe we can stop getting these silly things reported as vulnerabilities.
Here's my initial attempt at documenting this, in a new man page no less!
https://github.com/curl/curl/pull/23511
Feel most welcome to help us polish this text!
Date: Tue, 20 Oct 2026 17:50:49 +0200 (CEST)
Hi,
One of the more popular nits the AIs find and report in curl these days are
minor prolems when libcurl reuses a connection even though some minor TLS/CA
related option was changed compared to how the option was set when the
connection was setup.
I want to loosen up our rules around this because I don't think we need them
and I don't think users actually toggle and change all those options in the
same handle and even if they do, they don't get hurt if such connections are
reused.
Feel free to tell me you think I'm wrong!
Then maybe we can stop getting these silly things reported as vulnerabilities.
Here's my initial attempt at documenting this, in a new man page no less!
https://github.com/curl/curl/pull/23511
Feel most welcome to help us polish this text!
-- / daniel.haxx.se || https://rock-solid.curl.dev -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2026-10-20