From: Daniel Stenberg <daniel@haxx.se>
Date: Fri, 10 Mar 2023 09:35:24 +0000 (+0100)
Subject: CURLOPT_PROXY.3: curl+NSS does not handle HTTPS over unix domain socket
X-Git-Tag: curl-8_0_0~57
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fcee070cb110cd6cd2c52a5e2c4ccb5b10fcf75e;p=thirdparty%2Fcurl.git

CURLOPT_PROXY.3: curl+NSS does not handle HTTPS over unix domain socket

It results in error "NSS error -5985 (PR_ADDRESS_NOT_SUPPORTED_ERROR)"

Disabled test 1470 for NSS builds and documented the restriction.

Reported-by: Dan Fandrich
Fixes #10723
Closes #10734
---

diff --git a/docs/libcurl/opts/CURLOPT_PROXY.3 b/docs/libcurl/opts/CURLOPT_PROXY.3
index 3ebcc61458..22ec86d0c9 100644
--- a/docs/libcurl/opts/CURLOPT_PROXY.3
+++ b/docs/libcurl/opts/CURLOPT_PROXY.3
@@ -118,6 +118,9 @@ Since 7.21.7 the proxy string supports the socks protocols as "schemes".
 
 Since 7.50.2, unsupported schemes in proxy strings cause libcurl to return
 error.
+
+curl built to use NSS cannot connect to a HTTPS server over a unix domain
+socket.
 .SH RETURN VALUE
 Returns CURLE_OK if proxies are supported, CURLE_UNKNOWN_OPTION if not, or
 CURLE_OUT_OF_MEMORY if there was insufficient heap space.
diff --git a/tests/data/test1470 b/tests/data/test1470
index dec99543fb..7807a3dce8 100644
--- a/tests/data/test1470
+++ b/tests/data/test1470
@@ -34,6 +34,7 @@ Funny-head: yesyes
 <features>
 proxy
 unix-sockets
+!NSS
 </features>
 <server>
 https