curl/docs/cmdline-opts/doh-cert-status.d

Long: doh-cert-status
Help: Verify the status of the DoH server cert via OCSP-staple
Protocols: all
Added: 7.76.0
Category: dns tls
---
Same as --cert-status but used for DoH (DNS-over-HTTPS).
doh: add options to disable ssl verification - New libcurl options CURLOPT_DOH_SSL_VERIFYHOST, CURLOPT_DOH_SSL_VERIFYPEER and CURLOPT_DOH_SSL_VERIFYSTATUS do the same as their respective counterparts. - New curl tool options --doh-insecure and --doh-cert-status do the same as their respective counterparts. Prior to this change DOH SSL certificate verification settings for verifyhost and verifypeer were supposed to be inherited respectively from CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER, but due to a bug were not. As a result DOH verification remained at the default, ie enabled, and it was not possible to disable. This commit changes behavior so that the DOH verification settings are independent and not inherited. Ref: https://github.com/curl/curl/pull/4579#issuecomment-554723676 Fixes https://github.com/curl/curl/issues/4578 Closes https://github.com/curl/curl/pull/6597 2021-02-12 01:09:59 +03:00			`Long: doh-cert-status`
cleanup: spell DoH with a lowercase o Signed-off-by: Josh Soref <jsoref@users.noreply.github.com> Closes #7413 2021-07-16 10:17:03 +03:00			`Help: Verify the status of the DoH server cert via OCSP-staple`
doh: add options to disable ssl verification - New libcurl options CURLOPT_DOH_SSL_VERIFYHOST, CURLOPT_DOH_SSL_VERIFYPEER and CURLOPT_DOH_SSL_VERIFYSTATUS do the same as their respective counterparts. - New curl tool options --doh-insecure and --doh-cert-status do the same as their respective counterparts. Prior to this change DOH SSL certificate verification settings for verifyhost and verifypeer were supposed to be inherited respectively from CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER, but due to a bug were not. As a result DOH verification remained at the default, ie enabled, and it was not possible to disable. This commit changes behavior so that the DOH verification settings are independent and not inherited. Ref: https://github.com/curl/curl/pull/4579#issuecomment-554723676 Fixes https://github.com/curl/curl/issues/4578 Closes https://github.com/curl/curl/pull/6597 2021-02-12 01:09:59 +03:00			`Protocols: all`
			`Added: 7.76.0`
			`Category: dns tls`
			`---`
cleanup: spell DoH with a lowercase o Signed-off-by: Josh Soref <jsoref@users.noreply.github.com> Closes #7413 2021-07-16 10:17:03 +03:00			`Same as --cert-status but used for DoH (DNS-over-HTTPS).`