moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-21 23:58:49 -05:00
Code Issues Releases Wiki Activity

Slight editing of wording in the CURLOPT_SSL_VERIFYHOST section.

Browse Source
This commit is contained in:
Daniel Stenberg 2005-10-13 21:49:28 +00:00
parent e73c6e039e
commit 82a4c2bce3
1 changed files with 14 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
docs/libcurl/curl_easy_setopt.3
View File

@ -1132,26 +1132,25 @@ socket. It will be used to seed the random engine for SSL.
.IP CURLOPT_SSL_VERIFYHOST .IP CURLOPT_SSL_VERIFYHOST
Pass a long as parameter. Pass a long as parameter.
This option determines whether curl verifies that the server claims to be This option determines whether libcurl verifies that the server cert is for
who you want it to be. the server it is known as.
When negotiating an SSL connection, the server sends a certificate When negotiating an SSL connection, the server sends a certificate indicating
indicating its identity. its identity.
When \fICURLOPT_SSL_VERIFYHOST\fP is 2, that certificate must indicate When \fICURLOPT_SSL_VERIFYHOST\fP is 2, that certificate must indicate that
that the server is the server to which you meant to connect, or the the server is the server to which you meant to connect, or the connection
connection fails. fails.
Curl considers the server the intended one when the Common Name field Curl considers the server the intended one when the Common Name field or a
or a Subject Alternate Name field in the certificate matches the host Subject Alternate Name field in the certificate matches the host name in the
name in the URL to which you told Curl to connect. URL to which you told Curl to connect.
When the value is 1, the certificate must contain a Common Name field, When the value is 1, the certificate must contain a Common Name field, but it
but it doesn't matter what name it says. (This is not ordinarily a doesn't matter what name it says. (This is not ordinarily a useful setting).
useful setting).
When the value is 0, the connection succeeds regardless of the names in When the value is 0, the connection succeeds regardless of the names in the
the certificate. certificate.
The default, since 7.10, is 2. The default, since 7.10, is 2.