From fcee070cb110cd6cd2c52a5e2c4ccb5b10fcf75e Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Fri, 10 Mar 2023 10:35:24 +0100 Subject: [PATCH] CURLOPT_PROXY.3: curl+NSS does not handle HTTPS over unix domain socket It results in error "NSS error -5985 (PR_ADDRESS_NOT_SUPPORTED_ERROR)" Disabled test 1470 for NSS builds and documented the restriction. Reported-by: Dan Fandrich Fixes #10723 Closes #10734 --- docs/libcurl/opts/CURLOPT_PROXY.3 | 3 +++ tests/data/test1470 | 1 + 2 files changed, 4 insertions(+) diff --git a/docs/libcurl/opts/CURLOPT_PROXY.3 b/docs/libcurl/opts/CURLOPT_PROXY.3 index 3ebcc61458..22ec86d0c9 100644 --- a/docs/libcurl/opts/CURLOPT_PROXY.3 +++ b/docs/libcurl/opts/CURLOPT_PROXY.3 @@ -118,6 +118,9 @@ Since 7.21.7 the proxy string supports the socks protocols as "schemes". Since 7.50.2, unsupported schemes in proxy strings cause libcurl to return error. + +curl built to use NSS cannot connect to a HTTPS server over a unix domain +socket. .SH RETURN VALUE Returns CURLE_OK if proxies are supported, CURLE_UNKNOWN_OPTION if not, or CURLE_OUT_OF_MEMORY if there was insufficient heap space. diff --git a/tests/data/test1470 b/tests/data/test1470 index dec99543fb..7807a3dce8 100644 --- a/tests/data/test1470 +++ b/tests/data/test1470 @@ -34,6 +34,7 @@ Funny-head: yesyes proxy unix-sockets +!NSS https