cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH 2/2] throw CURLE_SSL_CERTPROBLEM in case peer rejects a cert

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Fri, 19 Mar 2010 14:40:54 +0100 (CET)

On Thu, 18 Mar 2010, Kamil Dudka wrote:

> attached is a patch to refine the error code in case peer rejects a client
> certificates for some reason. It works only with NSS for now, but can be
> easily extended for OpenSSL if anybody knows how to process its errors
> codes. I didn't find it in the documentation so far.

I just have a suggestion to change the implementation slightly:

Instead of adding another field in a struct used only to return an extra error
code, can't we for example return an CURLcode negative for specific errors
from the Curl_ssl_send() function? Or even doing it with an extra argument
like passing in the address of a variable to hold the error code?

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2010-03-19