Builder curl-ares-solaris11-i386 Build #3594

Results:

Build successful

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-ares-solaris11-i386' triggered this build

Steps and Logfiles:

1. git update ( 9 secs )
   1. stdio
2. Runtest './tests/testcurl.pl --nogitpull ...' ( 54 mins, 6 secs )
   1. stdio
   2. resultlog
3. Mail result 'cat resultlog ...' ( 1 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Rod Widdowson

   rdwohnoyoudont@steadingsoftware.com

Timing:

All Changes:

:

1. Change #232235

   Category	curl
   Changed by	Rod Widdowson <rdwohnoyoudont@steadingsoftware.com>
   Changed at	Sun 15 Jun 2025 00:55:08
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	df1ff17f88a623b12c13ffd893ca4ac47c5f04d1

   Comments

   schannel: allow partial chains for manual peer verification
   - Align --cacert behaviour with OpenSSL and LibreSSL.
   
   This changes the default behavior of Schannel manual certificate
   verification, which is used when the user provides their own CA
   certificates for verification, to accept partial chains. In other words,
   the user may provide an intermediate certificate without having to
   provide the root CA.
   
   Win8/Server2012 widened the PKIX chain traversal API to allow
   certificate traversal to terminate at an intermediate.
   
   This behaviour (terminate at the fist matching intermediate) is the
   default for LibreSSL and OpenSSL (with OpenSSL allowing control via
   CURLSSLOPT_NO_PARTIALCHAIN).
   
   This change uses the new API if it is available, and also allows the
   behaviour to revert legacy if CURLSSLOPT_NO_PARTIALCHAIN is present.
   
   Closes https://github.com/curl/curl/pull/17418

   Changed files

   • docs/libcurl/opts/CURLOPT_PROXY_SSL_OPTIONS.md
   • docs/libcurl/opts/CURLOPT_SSL_OPTIONS.md
   • lib/vtls/schannel_verify.c