From: Junio C Hamano <gitster@pobox.com>
Date: Thu, 24 Sep 2026 16:22:39 GMT
Subject: Re: [PATCH v7] http: add http.sslVerifyStatus to check stapled OCSP responses
Message-ID: <xmqqcxu24o1c.fsf@gitster.g>
In-Reply-To: <arTUNYVvCNwX1pDp@szeder.dev>

SZEDER Gábor <szeder.dev@gmail.com> writes:

>   - Checking for the error message printed after curl_easy_setopt(...,
>     CURLOPT_SSL_VERIFYSTATUS, ...) returns with error is indeed the
>     right thing to do.
>
>     However, in that new error message the second half is much more
>     informative than the first, and if the prereq looked for the
>     absence of "could not enable OCSP status verification" instead of
>     "http.sslVerifyStatus is set", then I think I would have realized
>     all this sooner.  Perhaps calling the prereq CURL_SSL_VERIFYSTATUS
>     would have helped, too.

Yeah, both are understandable.

Thanks.