Re: Adding flags to SChannel cred

2021-02-28 Thread Morten Minde Neergaard via curl-library
At 17:11, Sat 2021-02-27, Ray Satiro via curl-library wrote: > On 2/26/2021 2:56 PM, Morten Minde Neergaard via curl-library wrote: [...] > > The first thing that came to mind would be to add an option > > CURLOPT_SSL_BACKEND_FLAGS where each backend could use these flags

Getting pubkey fingerprint in libcurl

2021-02-26 Thread Morten Minde Neergaard via curl-library
Hi, I'm making an app that's using public key pinning, and it would be very helpful to have programmatic access to the pubkey fingerprint. The app currently has a huge and horrible mountain of platform- and backend-specific code that extracts the public key fingerprint from the TLS backend before

Adding flags to SChannel cred

2021-02-26 Thread Morten Minde Neergaard via curl-library
Hi, I'm using libcurl in a project I'm doing, and I'd like to specify some extra flags to the SCHANNEL_CRED struct to enhance security and remove potential error sources: SCH_USE_STRONG_CRYPTO: Disables some older cipher suites. SCH_CRED_NO_DEFAULT_CREDS Found a TODO about this flag at