diff options
| author | Alessandro Ghedini <alessandro@ghedini.me> | 2014-06-16 13:20:47 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2015-01-16 23:23:29 +0100 |
| commit | 3af90a6e19249807f99bc9ee7b50d3e58849072a (patch) | |
| tree | a8e4e31842fcf4b40dbb283847940ea2e83ee3d4 /lib/urldata.h | |
| parent | 5e113a18c56e0743e377854ab18c79305b2830ea (diff) | |
url: add CURLOPT_SSL_VERIFYSTATUS option
This option can be used to enable/disable certificate status verification using
the "Certificate Status Request" TLS extension defined in RFC6066 section 8.
This also adds the CURLE_SSL_INVALIDCERTSTATUS error, to be used when the
certificate status verification fails, and the Curl_ssl_cert_status_request()
function, used to check whether the SSL backend supports the status_request
extension.
Diffstat (limited to 'lib/urldata.h')
| -rw-r--r-- | lib/urldata.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/urldata.h b/lib/urldata.h index 5f774704a..50a745f11 100644 --- a/lib/urldata.h +++ b/lib/urldata.h @@ -366,6 +366,7 @@ struct ssl_config_data { bool verifypeer; /* set TRUE if this is desired */ bool verifyhost; /* set TRUE if CN/SAN must match hostname */ + bool verifystatus; /* set TRUE if certificate status must be checked */ char *CApath; /* certificate dir (doesn't work on windows) */ char *CAfile; /* certificate to verify peer against */ const char *CRLfile; /* CRL to check certificate revocation */ |