1CURLOPT_PROXY_SSL_OPTIONS(3)curl_easy_setopt optionsCURLOPT_PROXY_SSL_OPTIONS(3)
2
3
4

NAME

6       CURLOPT_PROXY_SSL_OPTIONS - set proxy SSL behavior options
7

SYNOPSIS

9       #include <curl/curl.h>
10
11       CURLcode curl_easy_setopt(CURL *handle, CURLOPT_PROXY_SSL_OPTIONS, long
12       bitmask);
13

DESCRIPTION

15       Pass a long with a bitmask to tell libcurl about  specific  SSL  behav‐
16       iors.
17
18       CURLSSLOPT_ALLOW_BEAST  tells  libcurl  to not attempt to use any work‐
19       arounds for a security flaw in the SSL3 and TLS1.0 protocols.  If  this
20       option  isn't  used or this bit is set to 0, the SSL layer libcurl uses
21       may use a work-around for this flaw although it might cause  interoper‐
22       ability problems with some (older) SSL implementations. WARNING: avoid‐
23       ing this work-around lessens the security, and by setting  this  option
24       to  1 you ask for exactly that.  This option is only supported for Dar‐
25       winSSL, NSS and OpenSSL.
26
27       CURLSSLOPT_NO_REVOKE tells libcurl to  disable  certificate  revocation
28       checks  for  those  SSL  backends  where such behavior is present. This
29       option is only supported for Schannel (the native Windows SSL library),
30       with  an  exception in the case of Windows' Untrusted Publishers black‐
31       list which it seems can't be bypassed.
32

DEFAULT

34       0
35

PROTOCOLS

37       All
38

AVAILABLE

40       Added in 7.52.0
41

EXAMPLE

43       CURL *curl = curl_easy_init();
44       if(curl) {
45         curl_easy_setopt(curl, CURLOPT_URL, "https://example.com/");
46         curl_easy_setopt(curl, CURLOPT_PROXY, "https://proxy");
47         /* weaken TLS only for use with silly proxies */
48         curl_easy_setopt(curl, CURLOPT_PROXY_SSL_OPTIONS, CURLSSLOPT_ALLOW_BEAST |
49                          CURLSSLOPT_NO_REVOKE);
50         ret = curl_easy_perform(curl);
51         curl_easy_cleanup(curl);
52       }
53

RETURN VALUE

55       Returns CURLE_OK if the option is supported,  and  CURLE_UNKNOWN_OPTION
56       if not.
57

SEE ALSO

59       CURLOPT_PROXY_SSLVERSION(3),   CURLOPT_PROXY_SSL_CIPHER_LIST(3),   CUR‐
60       LOPT_SSLVERSION(3), CURLOPT_SSL_CIPHER_LIST(3),
61
62
63
64libcurl 7.66.0                   July 16, 2019    CURLOPT_PROXY_SSL_OPTIONS(3)
Impressum