cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: splitting CURLE_SSL_CACERT error cases

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Mon, 9 Oct 2006 16:09:04 +0200 (CEST)

On Mon, 9 Oct 2006, Armel Asselin wrote:

> indeed near gtls.c:238 inability to load certificate file seems to lead to
> just an info message, whereas in openssl part of the code it leads to an
> error if peer verification is requested. should i test for
> data->set.ssl.verifypeer? and fail with CURLE_SSL_CACERT_BADFILE if it is
> set?

Yes I think so. There's no point in continuing anyway, since if verification
is requested it will fail without the file so it is better to return a more
appropriate error to help the user pinpoint the problem.

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html
Received on 2006-10-09