From cfd608d887c77e0b9a0d5f363a29801eb0f7b357 Mon Sep 17 00:00:00 2001 From: ekinhbayar Date: Wed, 9 Nov 2022 02:20:52 +0300 Subject: [PATCH] Document new CURLSSLOPT_* constants --- reference/curl/constants.xml | 44 ++++++++++++++++++++++++ reference/curl/functions/curl-setopt.xml | 23 +++++++++++++ 2 files changed, 67 insertions(+) diff --git a/reference/curl/constants.xml b/reference/curl/constants.xml index 221adaffc319..f13fb08dc867 100644 --- a/reference/curl/constants.xml +++ b/reference/curl/constants.xml @@ -4057,6 +4057,50 @@ + + + CURLSSLOPT_AUTO_CLIENT_CERT + (int) + + + + Available since PHP 8.2.0 and cURL 7.77.0 + + + + + + CURLSSLOPT_NATIVE_CA + (int) + + + + Available since PHP 8.2.0 and cURL 7.71.0 + + + + + + CURLSSLOPT_NO_PARTIALCHAIN + (int) + + + + Available since PHP 8.2.0 and cURL 7.68.0 + + + + + + CURLSSLOPT_REVOKE_BEST_EFFORT + (int) + + + + Available since PHP 8.2.0 and cURL 7.70.0 + + + CURLOPT_USERNAME diff --git a/reference/curl/functions/curl-setopt.xml b/reference/curl/functions/curl-setopt.xml index 0c0dff52035f..ca516672896c 100644 --- a/reference/curl/functions/curl-setopt.xml +++ b/reference/curl/functions/curl-setopt.xml @@ -1091,6 +1091,29 @@ revocation checks for those SSL backends where such behavior is present. + + CURLSSLOPT_AUTO_CLIENT_CERT: automatically + locate and use a client certificate for authentication, when + requested by the server. This option is only supported for + Schannel (the native Windows SSL library). + + + CURLSSLOPT_NATIVE_CA: use the operating system's + native CA store for certificate verification. Works only on Windows + when built to use OpenSSL. This option is experimental and behavior is subject to change. + + + CURLSSLOPT_NO_PARTIALCHAIN: do not accept "partial" certificate + chains, which cURL otherwise does by default. This option is only supported for OpenSSL + and will fail the certificate verification if the chain ends with + an intermediate certificate and not with a root certificate. + + + CURLSSLOPT_REVOKE_BEST_EFFORT: ignore certificate revocation checks + in case of missing or offline distribution points for those SSL backends where + such behavior is present. This option is only supported for Schannel (the native Windows SSL library). + If combined with CURLSSLOPT_NO_REVOKE, the latter takes precedence. + Added in cURL 7.25.0. Available since PHP 7.0.7.