romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-30 13:28:27 +03:00
Code Issues Projects Releases Packages Wiki Activity

openssl: Support async cert verify callback

Browse source 
- Update the OpenSSL connect state machine to handle
  SSL_ERROR_WANT_RETRY_VERIFY.

This allows libcurl users that are using custom certificate validation
to suspend processing while waiting for external I/O during certificate
validation.

Closes https://github.com/curl/curl/pull/11499
This commit is contained in:
Pablo Busse 2023-06-22 06:13:07 +00:00 • committed by Jay Satiro
parent af3f4e419b
commit 11d46bcfb2
2 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.3
View file

@ -61,6 +61,9 @@ necessary. For example, you can use this function to call library-specific
callbacks to add additional validation code for certificates, and even to
change the actual URI of an HTTPS request.
For OpenSSL, asynchronous certificate verification via
\fISSL_set_retry_verify\fP is supported. (Added in 8.3.0)
WARNING: The \fICURLOPT_SSL_CTX_FUNCTION(3)\fP callback allows the application
to reach in and modify SSL details in the connection without libcurl itself
knowing anything about it, which then subsequently can lead to libcurl