diff options
| author | Alessandro Ghedini <alessandro@ghedini.me> | 2014-06-16 13:20:47 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2015-01-16 23:23:29 +0100 |
| commit | 3af90a6e19249807f99bc9ee7b50d3e58849072a (patch) | |
| tree | a8e4e31842fcf4b40dbb283847940ea2e83ee3d4 /lib/vtls/vtls.c | |
| parent | 5e113a18c56e0743e377854ab18c79305b2830ea (diff) | |
url: add CURLOPT_SSL_VERIFYSTATUS option
This option can be used to enable/disable certificate status verification using
the "Certificate Status Request" TLS extension defined in RFC6066 section 8.
This also adds the CURLE_SSL_INVALIDCERTSTATUS error, to be used when the
certificate status verification fails, and the Curl_ssl_cert_status_request()
function, used to check whether the SSL backend supports the status_request
extension.
Diffstat (limited to 'lib/vtls/vtls.c')
| -rw-r--r-- | lib/vtls/vtls.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/lib/vtls/vtls.c b/lib/vtls/vtls.c index a53ff4ad6..cf1df24e4 100644 --- a/lib/vtls/vtls.c +++ b/lib/vtls/vtls.c @@ -848,4 +848,16 @@ void Curl_ssl_md5sum(unsigned char *tmp, /* input */ #endif } +/* + * Check whether the SSL backend supports the status_request extension. + */ +bool Curl_ssl_cert_status_request(void) +{ +#ifdef curlssl_cert_status_request + return curlssl_cert_status_request(); +#else + return FALSE; +#endif +} + #endif /* USE_SSL */ |