Change #247248
| Category | curl |
| Changed by | Stefan Eissing <stefan@eissing.org> |
| Changed at | Fri 31 Oct 2025 23:10:35 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | b4630ed8faef1834e2b64f30acc24e5101d4d2fb |
Comments
sectrust: fix verifystatus via sectrust When openssl does not verify the certificate, but apple sectrust does, we also pass it the ocsp stapled response when configured and available. When openssl does not verify the cert chain, it will also not be able to verify the ocsp stapling. Do not call it if sectrust is the verifier of the cert chain. Fixes #19307 Reported-by: Harry Sintonen Closes #19308
Changed files
- lib/vtls/openssl.c