Go to file
Nico Rieck 2d6333101a openssl: make CURLSSLOPT_NATIVE_CA import Windows intermediate CAs
- If CURLSSLOPT_NATIVE_CA on Windows then import from intermediate CA
  "CA" store after importing from root CA "ROOT" store.

This change allows curl to work in situations where a server does not
send all intermediate certs and they are present in the "CA" store (the
store with intermediate CAs). This is already allowed by the Schannel
backend.

Also this change makes partial chain verification possible for those
certs since we allow partial chain verification by default for OpenSSL
(unless CURLSSLOPT_NO_PARTIALCHAIN). This is not allowed by the Schannel
backend.

Prior to this change CURLSSLOPT_NATIVE_CA only imported "ROOT" certs.

Fixes https://github.com/curl/curl/issues/12155
Closes https://github.com/curl/curl/pull/12185
2023-10-29 03:39:43 -04:00
.circleci CI: run Circle macOS builds on x86 for now 2023-09-05 22:53:40 -07:00
.github GHA: move mod_h2 version in CI to v2.0.25 2023-10-19 16:51:59 +02:00
.reuse tool: use our own stderr variable 2023-09-28 10:50:56 +00:00
CMake build: variadic macro tidy-ups 2023-10-27 00:37:34 +00:00
docs CURLOPT_WRITEFUNCTION.3: clarify what libcurl returns for CURL_WRITEFUNC_ERROR 2023-10-26 17:08:25 +02:00
include RELEASE-NOTES: synced 2023-10-22 10:58:08 +02:00
lib openssl: make CURLSSLOPT_NATIVE_CA import Windows intermediate CAs 2023-10-29 03:39:43 -04:00
LICENSES copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
m4 cmake: pre-fill rest of detection values for Windows 2023-10-24 21:06:36 +00:00
packages spelling: fix codespell 2.2.6 typos 2023-10-03 21:37:56 +00:00
plan9 copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
projects tidy-up: mostly whitespace nits 2023-08-31 23:02:10 +00:00
scripts autotools: update references to deleted crypt-auth option 2023-10-25 12:45:43 +00:00
src tool: fix --capath when proxy support is disabled 2023-10-21 14:52:47 +02:00
tests build: variadic macro tidy-ups 2023-10-27 00:37:34 +00:00
winbuild build: do not publish HAVE_BORINGSSL, HAVE_AWSLC macros 2023-10-08 22:29:45 +00:00
.azure-pipelines.yml CI: move distcheck job from Azure Pipelines to GitHub Actions 2023-10-08 19:36:16 +02:00
.cirrus.yml CI: bump OpenLDAP package version on FreeBSD 2023-10-07 12:52:07 -07:00
.dcignore copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.dir-locals.el copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.git-blame-ignore-revs copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.gitattributes copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
.gitignore tidy-up: mostly whitespace nits 2023-08-31 23:02:10 +00:00
.mailmap mailmap: unify Michael Osipov under a single email 2023-09-21 14:18:49 +02:00
acinclude.m4 build: variadic macro tidy-ups 2023-10-27 00:37:34 +00:00
appveyor.yml cmake: pre-fill rest of detection values for Windows 2023-10-24 21:06:36 +00:00
buildconf copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
buildconf.bat copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
CHANGES curl.se: new home 2020-11-04 23:59:47 +01:00
CMakeLists.txt build: variadic macro tidy-ups 2023-10-27 00:37:34 +00:00
configure.ac build: variadic macro tidy-ups 2023-10-27 00:37:34 +00:00
COPYING copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
curl-config.in copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
GIT-INFO GIT-INFO: add --with-openssl 2023-05-14 23:22:23 +02:00
libcurl.def curl_multi_get_handles: get easy handles from a multi handle 2023-09-25 20:16:58 +02:00
libcurl.pc.in copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
MacOSX-Framework copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
Makefile.am cmake: add support for single libcurl compilation pass 2023-08-01 08:12:26 +00:00
Makefile.dist copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
maketgz copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
README docs: minor grammar fixes 2022-09-29 10:44:12 +02:00
README.md tidy-up: mostly whitespace nits 2023-08-31 23:02:10 +00:00
RELEASE-NOTES RELEASE-NOTES: synced 2023-10-26 17:33:25 +02:00
SECURITY.md SECURITY-PROCESS.md. call it vulnerability disclosure policy 2023-09-14 17:04:33 +02:00

curl logo

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how.

You can find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Commercial support

For commercial support, maybe private and dedicated help with your problems or applications using (lib)curl visit the support page.

Website

Visit the curl website for the latest news and downloads.

Git

To download the latest source from the Git server, do this:

git clone https://github.com/curl/curl.git

(you will get a directory named curl created, filled with the source code)

Security problems

Report suspected security problems via our HackerOne page and not in public.

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.

Backers

Thank you to all our backers! 🙏 Become a backer.

Sponsors

Support this project by becoming a sponsor.