Change #286530
| Category | None |
| Changed by | Stefan Eissing <stefan@eissing.org> |
| Changed at | Fri 16 Oct 2026 16:40:23 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | master |
| Revision | cd89b5178b7d38da81900dbb65efc3580d467ab9 |
Comments
apple sectrust: require OCSP for cert-status When OCSP stapling is required for a transfer (e.g. --cert-status), pass `kSecRevocationRequirePositiveResponse` to Apple sectrust (when curl is built with it and it applies). This assures that verification by sectrust fails on a missing/invalid OCSP response. Reported-by: Sujit Jaunjal Closes #23430
Changed files
- lib/vtls/apple.c
- lib/vtls/apple.h
- lib/vtls/gtls.c
- lib/vtls/openssl.c