Hi friends.

Dima Barsky just filed bug report #1348930
(http://curl.haxx.se/bug/view.cgi?id=1348930):

   Unlike Curl_ossl_connect(), the Curl_gtls_connect() function does not send
   the user certificate to the peer. In fact, it ignores the
   conn->data->set.cert field completely, it always uses the anonymous
   credentials.

The analysis is of course 100% correct.

Anyone up to the challange to fix this? I don't have/use any site with a
client-side cert to test out such a fix myself.
Received on 2005-11-05