CURLOPT_DOH_SSL_VERIFYSTATUS(3)

1CURLOPT_DOH_SSL_VERIFYSTATUSc(u3r)l_easy_setopt optiCoUnRsLOPT_DOH_SSL_VERIFYSTATUS(3)
2
3
4

NAME

6       CURLOPT_DOH_SSL_VERIFYSTATUS - verify the DoH SSL certificate's status
7

SYNOPSIS

9       #include <curl/curl.h>
10
11       CURLcode  curl_easy_setopt(CURL  *handle, CURLOPT_DOH_SSL_VERIFYSTATUS,
12       long verify);
13

DESCRIPTION

15       Pass a long as parameter set to 1 to enable or 0 to disable.
16
17       This option determines whether libcurl verifies the status of  the  DoH
18       (DNS-over-HTTPS) server cert using the "Certificate Status Request" TLS
19       extension (aka. OCSP stapling).
20
21       This option is the DoH equivalent  of  CURLOPT_SSL_VERIFYSTATUS(3)  and
22       only affects requests to the DoH server.
23
24       Note that if this option is enabled but the server does not support the
25       TLS extension, the verification will fail.
26

DEFAULT

28       0
29

PROTOCOLS

31       DoH
32

EXAMPLE

34       CURL *curl = curl_easy_init();
35       if(curl) {
36         curl_easy_setopt(curl, CURLOPT_URL, "https://example.com");
37
38         curl_easy_setopt(curl, CURLOPT_DOH_URL, "https://cloudflare-dns.com/dns-query");
39
40         /* Ask for OCSP stapling when verifying the DoH server */
41         curl_easy_setopt(curl, CURLOPT_DOH_SSL_VERIFYSTATUS, 1L);
42
43         curl_easy_perform(curl);
44       }
45

AVAILABILITY

47       Added in 7.76.0.  This  option  is  currently  only  supported  by  the
48       OpenSSL, GnuTLS and NSS TLS backends.
49

RETURN VALUE

51       Returns CURLE_OK if OCSP stapling is supported by the SSL backend, oth‐
52       erwise returns CURLE_NOT_BUILT_IN.
53