CURLOPT_DO...RIFYSTATUS(3)

okay so bestie, this is the CURLOPT_DO...RIFYSTATUS(3) page from the Library Functions Manual — yes the printed title is truncated like that, and the real option is CURLOPT_DOH_SSL_VERIFYSTATUS, iykyk 💅✨

✨ NAME ✨

CURLOPT_DOH_SSL_VERIFYSTATUS — verify the DoH SSL certificate's status, periodt 🎀

✨ SYNOPSIS ✨

#include <curl/curl.h>

CURLcode curl_easy_setopt(CURL *handle, CURLOPT_DOH_SSL_VERIFYSTATUS,
                          long verify);

✨ DESCRIPTION ✨

You pass a long as the parameter: set it to 1 to enable, or 0 to disable. That's the whole switch, bestie.

This option decides whether libcurl verifies the status of the DoH (DNS-over-HTTPS) server cert using the "Certificate Status Request" TLS extension (aka. OCSP stapling). OCSP stapling mention spotted 👑

This option is the DoH equivalent of CURLOPT_SSL_VERIFYSTATUS(3) and only affects requests to the DoH server.

If this option is enabled and the server does not support the TLS extension, the verification fails. Like, it fails fails — no cap 😭

✨ DEFAULT ✨

0 — off by default, bestie 🫶

✨ PROTOCOLS ✨

This functionality affects all TLS based protocols: HTTPS, FTPS, IMAPS, POP3S, SMTPS etc.

This option works only with the following TLS backends: GnuTLS and OpenSSL.

✨ EXAMPLE ✨

Here's the example, copied exactly because we do not mess with code in this house 🧚💖

int main(void)
{
  CURL *curl = curl_easy_init();
  if(curl) {
    curl_easy_setopt(curl, CURLOPT_URL, "https://example.com");

    curl_easy_setopt(curl, CURLOPT_DOH_URL,
                     "https://cloudflare-dns.com/dns-query");

    /* Ask for OCSP stapling when verifying the DoH server */
    curl_easy_setopt(curl, CURLOPT_DOH_SSL_VERIFYSTATUS, 1L);

    curl_easy_perform(curl);
  }
}

✨ AVAILABILITY ✨

Added in curl 7.76.0 — that's the lore, bestie 🌸

✨ RETURN VALUE ✨

curl_easy_setopt(3) returns a CURLcode indicating success or error.

CURLE_OK (0) means everything was OK, non-zero means an error occurred, see libcurl-errors(3).

✨ SEE ALSO ✨

• CURLOPT_DOH_SSL_VERIFYHOST(3)
• CURLOPT_DOH_SSL_VERIFYPEER(3)
• CURLOPT_SSL_VERIFYSTATUS(3)

---

okay bye bestie 💖 — this was libcurl, dated 2026-10-12, and the footer title is still the truncated CURLOPT_DO...RIFYSTATUS(3) (the truncation ate, fr fr).