cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: splitting CURLE_SSL_CACERT error cases

From: Armel Asselin <asselin.armel_at_wanadoo.fr>
Date: Mon, 9 Oct 2006 11:42:00 +0200

>> for a 'new error patch', there are stuff in : curl.h, the doc, curl error
>> text function, plus the places were it is returned, isn't it?
>
> Sounds about right. Remember that there are both OpenSSL and GnuTLS uses
> of it.
indeed near gtls.c:238 inability to load certificate file seems to lead to
just an info message, whereas in openssl part of the code it leads to an
error if peer verification is requested. should i test for
data->set.ssl.verifypeer? and fail with CURLE_SSL_CACERT_BADFILE if it is
set?

Armel
Received on 2006-10-09