summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2018-08-27 08:30:57 +0200
committerDaniel Stenberg <daniel@haxx.se>2018-08-27 08:30:57 +0200
commitdc25a9751266c1b0c512665b4be3c3b4b88d4fcf (patch)
treeca18a97fd62d44a7ff9905697afb37415590aa39
parentf16bed0c45dc63864fe2097b7df939276d96d62b (diff)
downloadcurl-bagder/docs-ssl-ctx-function.tar.gz
CURLOPT_SSL_CTX_FUNCTION.3: this can cause unintended connectionc reuse [ci skip]bagder/docs-ssl-ctx-function
Added a warning!
-rw-r--r--docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.37
1 files changed, 6 insertions, 1 deletions
diff --git a/docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.3 b/docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.3
index 3a54ef36c..779ee7812 100644
--- a/docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.3
+++ b/docs/libcurl/opts/CURLOPT_SSL_CTX_FUNCTION.3
@@ -5,7 +5,7 @@
.\" * | (__| |_| | _ <| |___
.\" * \___|\___/|_| \_\_____|
.\" *
-.\" * Copyright (C) 1998 - 2017, Daniel Stenberg, <daniel@haxx.se>, et al.
+.\" * Copyright (C) 1998 - 2018, Daniel Stenberg, <daniel@haxx.se>, et al.
.\" *
.\" * This software is licensed as described in the file COPYING, which
.\" * you should have received as part of this distribution. The terms
@@ -57,6 +57,11 @@ To use this properly, a non-trivial amount of knowledge of your SSL library is
necessary. For example, you can use this function to call library-specific
callbacks to add additional validation code for certificates, and even to
change the actual URI of an HTTPS request.
+
+WARNING: The \fICURLOPT_SSL_CTX_FUNCTION(3)\fP callback allows the application
+to reach in and modify SSL details in the connection without libcurl itself
+knowing anything about it, which then sunsequently can lead to libcurl
+unknowingly reusing SSL connections with different properties.
.SH DEFAULT
NULL
.SH PROTOCOLS