From fa7df3070a624ccdc77fa3f24eedb7b91441495b Mon Sep 17 00:00:00 2001 From: Jay Satiro Date: Tue, 29 Aug 2023 16:52:10 -0400 Subject: [PATCH] docs: mark --ssl-revoke-best-effort as Schannel specific Closes https://github.com/curl/curl/pull/11760 --- docs/cmdline-opts/ssl-auto-client-cert.d | 5 ++--- docs/cmdline-opts/ssl-revoke-best-effort.d | 2 +- src/tool_listhelp.c | 2 +- 3 files changed, 4 insertions(+), 5 deletions(-) diff --git a/docs/cmdline-opts/ssl-auto-client-cert.d b/docs/cmdline-opts/ssl-auto-client-cert.d index 4eab1ab326..8e3300869c 100644 --- a/docs/cmdline-opts/ssl-auto-client-cert.d +++ b/docs/cmdline-opts/ssl-auto-client-cert.d @@ -8,9 +8,8 @@ Category: tls Example: --ssl-auto-client-cert $URL Multi: boolean --- -Tell libcurl to automatically locate and use a client certificate for -authentication, when requested by the server. This option is only supported -for Schannel (the native Windows SSL library). Prior to 7.77.0 this was the +(Schannel) Tell libcurl to automatically locate and use a client certificate +for authentication, when requested by the server. Prior to 7.77.0 this was the default behavior in libcurl with Schannel. Since the server can request any certificate that supports client authentication in the OS certificate store it could be a privacy violation and unexpected. diff --git a/docs/cmdline-opts/ssl-revoke-best-effort.d b/docs/cmdline-opts/ssl-revoke-best-effort.d index b2d94d5d45..cb26d0b9a0 100644 --- a/docs/cmdline-opts/ssl-revoke-best-effort.d +++ b/docs/cmdline-opts/ssl-revoke-best-effort.d @@ -1,7 +1,7 @@ c: Copyright (C) Daniel Stenberg, , et al. SPDX-License-Identifier: curl Long: ssl-revoke-best-effort -Help: Ignore missing/offline cert CRL dist points +Help: Ignore missing/offline cert CRL dist points (Schannel) Added: 7.70.0 Category: tls Example: --ssl-revoke-best-effort $URL diff --git a/src/tool_listhelp.c b/src/tool_listhelp.c index fe35e4429b..aec93bfda6 100644 --- a/src/tool_listhelp.c +++ b/src/tool_listhelp.c @@ -685,7 +685,7 @@ const struct helptxt helptext[] = { "Require SSL/TLS", CURLHELP_TLS}, {" --ssl-revoke-best-effort", - "Ignore missing/offline cert CRL dist points", + "Ignore missing/offline cert CRL dist points (Schannel)", CURLHELP_TLS}, {"-2, --sslv2", "Use SSLv2",