From: Jay Satiro Date: Tue, 29 Aug 2023 20:52:10 +0000 (-0400) Subject: docs: mark --ssl-revoke-best-effort as Schannel specific X-Git-Tag: curl-8_3_0~16 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fa7df3070a624ccdc77fa3f24eedb7b91441495b;p=thirdparty%2Fcurl.git docs: mark --ssl-revoke-best-effort as Schannel specific Closes https://github.com/curl/curl/pull/11760 --- diff --git a/docs/cmdline-opts/ssl-auto-client-cert.d b/docs/cmdline-opts/ssl-auto-client-cert.d index 4eab1ab326..8e3300869c 100644 --- a/docs/cmdline-opts/ssl-auto-client-cert.d +++ b/docs/cmdline-opts/ssl-auto-client-cert.d @@ -8,9 +8,8 @@ Category: tls Example: --ssl-auto-client-cert $URL Multi: boolean --- -Tell libcurl to automatically locate and use a client certificate for -authentication, when requested by the server. This option is only supported -for Schannel (the native Windows SSL library). Prior to 7.77.0 this was the +(Schannel) Tell libcurl to automatically locate and use a client certificate +for authentication, when requested by the server. Prior to 7.77.0 this was the default behavior in libcurl with Schannel. Since the server can request any certificate that supports client authentication in the OS certificate store it could be a privacy violation and unexpected. diff --git a/docs/cmdline-opts/ssl-revoke-best-effort.d b/docs/cmdline-opts/ssl-revoke-best-effort.d index b2d94d5d45..cb26d0b9a0 100644 --- a/docs/cmdline-opts/ssl-revoke-best-effort.d +++ b/docs/cmdline-opts/ssl-revoke-best-effort.d @@ -1,7 +1,7 @@ c: Copyright (C) Daniel Stenberg, , et al. SPDX-License-Identifier: curl Long: ssl-revoke-best-effort -Help: Ignore missing/offline cert CRL dist points +Help: Ignore missing/offline cert CRL dist points (Schannel) Added: 7.70.0 Category: tls Example: --ssl-revoke-best-effort $URL diff --git a/src/tool_listhelp.c b/src/tool_listhelp.c index fe35e4429b..aec93bfda6 100644 --- a/src/tool_listhelp.c +++ b/src/tool_listhelp.c @@ -685,7 +685,7 @@ const struct helptxt helptext[] = { "Require SSL/TLS", CURLHELP_TLS}, {" --ssl-revoke-best-effort", - "Ignore missing/offline cert CRL dist points", + "Ignore missing/offline cert CRL dist points (Schannel)", CURLHELP_TLS}, {"-2, --sslv2", "Use SSLv2",