diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2019-05-12 16:35:33 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2019-05-12 16:35:33 +0200 |
| commit | 00170b300ff7676ae46beab773187b8e2e59ff2a (patch) | |
| tree | 91a98ae421129f080b4f745120ade878dc90eec2 | |
| parent | 4d8461ae8aef6140d7b3222dda6c3e078ad076be (diff) | |
| download | curl-bagder/cainfo-schannel-docs.tar.gz | |
CURLOPT_CAINFO.3: with Schannel, you want Windows 8 or later [ci skip]bagder/cainfo-schannel-docs
Clues-provided-by: Jay Satiro
Clues-provided-by: Jeroen Ooms
Fixes #3711
| -rw-r--r-- | docs/libcurl/opts/CURLOPT_CAINFO.3 | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/docs/libcurl/opts/CURLOPT_CAINFO.3 b/docs/libcurl/opts/CURLOPT_CAINFO.3 index 84fb30120..5f1068240 100644 --- a/docs/libcurl/opts/CURLOPT_CAINFO.3 +++ b/docs/libcurl/opts/CURLOPT_CAINFO.3 @@ -46,16 +46,17 @@ libnssckbi.so, which contains a more comprehensive set of trust information than supported by nss-pem, because libnssckbi.so also includes information about distrusted certificates. -(iOS and macOS only) If curl is built against Secure Transport, then this +(iOS and macOS) If curl is built against Secure Transport, then this option is supported for backward compatibility with other SSL engines, but it should not be set. If the option is not set, then curl will use the certificates in the system and user Keychain to verify the peer, which is the preferred method of verifying the peer's certificate chain. -(Schannel only) This option is supported for Schannel in Windows 7 or later -with libcurl 7.60 or later. This option is supported for backward -compatibility with other SSL engines; instead it is recommended to use -Windows' store of root certificates (the default for Schannel). +(Schannel) This option is supported for Schannel in Windows 7 or later but we +recommend not using it until Windows 8 since it works better starting then. +Added in libcurl 7.60. This option is supported for backward compatibility +with other SSL engines; instead it is recommended to use Windows' store of +root certificates (the default for Schannel). The application does not have to keep the string around after setting this option. |