Document new CURLSSLOPT_* constants

php · Nov 8, 2022 · cfd608d · cfd608d
1 parent 5ccab84
commit cfd608d
Show file tree

Hide file tree

Showing 2 changed files with 67 additions and 0 deletions.
diff --git a/reference/curl/constants.xml b/reference/curl/constants.xml
@@ -4057,6 +4057,50 @@
     </simpara>
    </listitem>
   </varlistentry>
+  <varlistentry xml:id="constant.curlsslopt-auto-client-cert">
+   <term>
+    <constant>CURLSSLOPT_AUTO_CLIENT_CERT</constant>
+    (<type>int</type>)
+   </term>
+   <listitem>
+    <simpara>
+     Available since PHP 8.2.0 and cURL 7.77.0
+    </simpara>
+   </listitem>
+  </varlistentry>
+  <varlistentry xml:id="constant.curlsslopt-native-ca">
+   <term>
+    <constant>CURLSSLOPT_NATIVE_CA</constant>
+    (<type>int</type>)
+   </term>
+   <listitem>
+    <simpara>
+     Available since PHP 8.2.0 and cURL 7.71.0
+    </simpara>
+   </listitem>
+  </varlistentry>
+  <varlistentry xml:id="constant.curlsslopt-no-partialchain">
+   <term>
+    <constant>CURLSSLOPT_NO_PARTIALCHAIN</constant>
+    (<type>int</type>)
+   </term>
+   <listitem>
+    <simpara>
+     Available since PHP 8.2.0 and cURL 7.68.0
+    </simpara>
+   </listitem>
+  </varlistentry>
+  <varlistentry xml:id="constant.curlsslopt-revoke-best-effort">
+   <term>
+    <constant>CURLSSLOPT_REVOKE_BEST_EFFORT</constant>
+    (<type>int</type>)
+   </term>
+   <listitem>
+    <simpara>
+     Available since PHP 8.2.0 and cURL 7.70.0
+    </simpara>
+   </listitem>
+  </varlistentry>
   <varlistentry xml:id="constant.curlopt-username">
    <term>
     <constant>CURLOPT_USERNAME</constant>

diff --git a/reference/curl/functions/curl-setopt.xml b/reference/curl/functions/curl-setopt.xml
@@ -1091,6 +1091,29 @@
              revocation checks for those SSL backends where such behavior is
              present.
             </simpara>
+            <simpara>
+             <constant>CURLSSLOPT_AUTO_CLIENT_CERT</constant>: automatically
+             locate and use a client certificate for authentication, when
+             requested by the server. This option is only supported for
+             Schannel (the native Windows SSL library).
+            </simpara>
+            <simpara>
+             <constant>CURLSSLOPT_NATIVE_CA</constant>: use the operating system's
+             native CA store for certificate verification. Works only on Windows 
+             when built to use OpenSSL. This option is experimental and behavior is subject to change.
+            </simpara>
+            <simpara>
+             <constant>CURLSSLOPT_NO_PARTIALCHAIN</constant>: do not accept "partial" certificate
+             chains, which cURL otherwise does by default. This option is only supported for OpenSSL
+             and will fail the certificate verification if the chain ends with
+             an intermediate certificate and not with a root certificate.
+            </simpara>
+            <simpara>
+             <constant>CURLSSLOPT_REVOKE_BEST_EFFORT</constant>: ignore certificate revocation checks
+             in case of missing or offline distribution points for those SSL backends where
+             such behavior is present. This option is only supported for Schannel (the native Windows SSL library).
+             If combined with <constant>CURLSSLOPT_NO_REVOKE</constant>, the latter takes precedence.
+            </simpara>
            </entry>
            <entry valign="top">
             Added in cURL 7.25.0. Available since PHP 7.0.7.