On Fri, 2 Nov 2018, Basuke Suzuki via curl-library wrote:

Let me make understanding clear who you proposed.

- Add new CURLINFO_SSL_VERIFIED.
 - Basically similar to existing CURLINFO_SSL_VERIFYRESULT
 - Returns only CURLcode

I think it should introduce a new line of TLS error codes that provide additional information for the case when CURLE_PEER_FAILED_VERIFICATION is returned.

Something like:

 CURLVERIFIED_HOSTFAIL,
 CURLVERIFIED_SIGNATUREFAIL,
 ...

- All backend need to implement this by hand

We could perhaps have a CURLVERIFIED_MISSING code to return for the backends that don't yet have additional details implemented.

Are these what you proposed?

Yes, with my minor clarifications here.

--

 / daniel.haxx.se
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html

Reply via email to