]> granicus.if.org Git - curl/commit
projects / curl / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: af5fbb1) | patch
TLS: make SSL_VERIFYSTATUS work again
authorDaniel Stenberg <daniel@haxx.se>
Sun, 22 Jan 2017 17:11:55 +0000 (18:11 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Tue, 21 Feb 2017 07:33:18 +0000 (08:33 +0100)
commitca6ea6d9be5102a2246dff6e17b3ee9ad4ec64d0
tree2e19cd1ea4d0b7b654629a0d14c04691f64de257tree | snapshot
parentaf5fbb14bb4fd86cdc5bf2c9f1f2b3b5d8d2af66commit | diff
TLS: make SSL_VERIFYSTATUS work again

The CURLOPT_SSL_VERIFYSTATUS option was not properly handled by libcurl
and thus even if the status couldn't be verified, the connection would
be allowed and the user would not be told about the failed verification.

Regression since cb4e2be7c6d42ca

CVE-2017-2629
Bug: https://curl.haxx.se/docs/adv_20170222.html

Reported-by: Marcus Hoffmann
lib/url.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.