[GNUnet-SVN] [gnurl] 102/178: CURLOPT_SSLCERT.3: improve WinSSL-specific usage info

[gnunet]

This is an automated email from the git hooks/post-receive script.

ng0 pushed a commit to branch master
in repository gnurl.

commit f0819f99ae226c293c0f49ef5e715a44bdad618b
Author: Archangel_SDY <address@hidden>
AuthorDate: Wed Apr 18 21:01:14 2018 +0800

    CURLOPT_SSLCERT.3: improve WinSSL-specific usage info
    
    Ref: https://github.com/curl/curl/pull/2376#issuecomment-381858780
    
    Closes https://github.com/curl/curl/pull/2504
---
 docs/cmdline-opts/cert.d            | 11 +++++++++++
 docs/libcurl/opts/CURLOPT_SSLCERT.3 | 12 ++++++++++--
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/docs/cmdline-opts/cert.d b/docs/cmdline-opts/cert.d
index 0cd5d535f..adf62fc7a 100644
--- a/docs/cmdline-opts/cert.d
+++ b/docs/cmdline-opts/cert.d
@@ -29,4 +29,15 @@ system or user keychain, or the path to a PKCS#12-encoded 
certificate and
 private key. If you want to use a file from the current directory, please
 precede it with "./" prefix, in order to avoid confusion with a nickname.
 
+(Schannel/WinSSL only) Client certificates must be specified by a path
+expression to a certificate store. (Loading PFX is not supported; you can
+import it to a store first). You can use
+"<store location>\\<store name>\\<thumbprint>" to refer to a certificate
+in the system certificates store, for example,
+"CurrentUser\\MY\\934a7ac6f8a5d579285a74fa61e19f23ddfe8d7a". Thumbprint is
+usually a SHA-1 hex string which you can see in certificate details. Following
+store locations are supported: CurrentUser, LocalMachine, CurrentService,
+Services, CurrentUserGroupPolicy, LocalMachineGroupPolicy,
+LocalMachineEnterprise.
+
 If this option is used several times, the last one will be used.
diff --git a/docs/libcurl/opts/CURLOPT_SSLCERT.3 
b/docs/libcurl/opts/CURLOPT_SSLCERT.3
index 3f40b73b9..bd867772a 100644
--- a/docs/libcurl/opts/CURLOPT_SSLCERT.3
+++ b/docs/libcurl/opts/CURLOPT_SSLCERT.3
@@ -38,8 +38,16 @@ you wish to authenticate with as it is named in the security 
database. If you
 want to use a file from the current directory, please precede it with "./"
 prefix, in order to avoid confusion with a nickname.
 
-With WinSSL, this can be expression like "CurrentUser\\MY\\<thumbprint>" to
-refer to a certificate in the system certificates store.
+(Schannel/WinSSL only) Client certificates must be specified by a path
+expression to a certificate store. (Loading PFX is not supported; you can
+import it to a store first). You can use
+"<store location>\\<store name>\\<thumbprint>" to refer to a certificate
+in the system certificates store, for example,
+"CurrentUser\\MY\\934a7ac6f8a5d579285a74fa61e19f23ddfe8d7a". Thumbprint is
+usually a SHA-1 hex string which you can see in certificate details. Following
+store locations are supported: CurrentUser, LocalMachine, CurrentService,
+Services, CurrentUserGroupPolicy, LocalMachineGroupPolicy,
+LocalMachineEnterprise.
 
 When using a client certificate, you most likely also need to provide a
 private key with \fICURLOPT_SSLKEY(3)\fP.

-- 
To stop receiving notification emails like this one, please contact
address@hidden