]> granicus.if.org Git - curl/commit
SSL: Add an option to disable certificate revocation checks
authorJay Satiro <raysatiro@yahoo.com>
Fri, 17 Jul 2015 06:40:16 +0000 (02:40 -0400)
committerJay Satiro <raysatiro@yahoo.com>
Fri, 17 Jul 2015 06:40:16 +0000 (02:40 -0400)
commit172b2beba6b89b632c09be7a88645e3a0607cfe9
tree96d0a159f3ce04f202fb20a939d5999fd3a3eca5
parent606b29fe0d07144ff13c3a731eef299b72060f91
SSL: Add an option to disable certificate revocation checks

New tool option --ssl-no-revoke.
New value CURLSSLOPT_NO_REVOKE for CURLOPT_SSL_OPTIONS.

Currently this option applies only to WinSSL where we have automatic
certificate revocation checking by default. According to the
ssl-compared chart there are other backends that have automatic checking
(NSS, wolfSSL and DarwinSSL) so we could possibly accommodate them at
some later point.

Bug: https://github.com/bagder/curl/issues/264
Reported-by: zenden2k <zenden2k@gmail.com>
15 files changed:
docs/SSL-PROBLEMS
docs/curl.1
docs/libcurl/opts/CURLOPT_SSL_OPTIONS.3
include/curl/curl.h
lib/url.c
lib/urldata.h
lib/vtls/schannel.c
src/tool_cfgable.h
src/tool_getparam.c
src/tool_help.c
src/tool_operate.c
src/tool_setopt.c
src/tool_setopt.h
tests/data/Makefile.inc
tests/data/test2043 [new file with mode: 0644]