From f022c91df609bb0bd3f7adfc7d7ab40546bc3c61 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Mon, 30 Apr 2018 10:26:26 +0200 Subject: [PATCH] KNOWN_BUGS: Client cert with Issuer DN differs between backends Closes #1411 --- docs/KNOWN_BUGS | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS index ad5e020e1..7389da6dc 100644 --- a/docs/KNOWN_BUGS +++ b/docs/KNOWN_BUGS @@ -27,6 +27,7 @@ problems may have been fixed or changed somewhat since this was written! 2.2 DER in keychain 2.3 GnuTLS backend skips really long certificate fields 2.4 DarwinSSL won't import PKCS#12 client certificates without a password + 2.5 Client cert handling with Issuer DN differs between backends 3. Email protocols 3.1 IMAP SEARCH ALL truncated response @@ -226,6 +227,13 @@ problems may have been fixed or changed somewhat since this was written! function rejects certificates that do not have a password. https://github.com/curl/curl/issues/1308 +2.5 Client cert handling with Issuer DN differs between backends + + When the specified client certificate doesn't match any of the + server-specified DNs, the OpenSSL and GnuTLS backends behave differently. + The github discussion may contain a solution. + + See https://github.com/curl/curl/issues/1411 3. Email protocols