]> git.ipfire.org Git - thirdparty/curl.git/commit
openssl: Don't ignore CA paths when using Windows CA store (redux)
authorJay Satiro <raysatiro@yahoo.com>
Thu, 5 Jan 2023 23:32:27 +0000 (18:32 -0500)
committerJay Satiro <raysatiro@yahoo.com>
Tue, 17 Jan 2023 08:32:58 +0000 (03:32 -0500)
commitc4cd0e2be96dafca24abe519999da5ab4e27b0a8
treeaa51c7b835bdd433f72f6296cf671d6ef4da0ea9
parent6113dec2a829d4ab766428ccca9535b7a5efd012
openssl: Don't ignore CA paths when using Windows CA store (redux)

.. and remove 'experimental' designation from CURLSSLOPT_NATIVE_CA.

This commit restores the behavior of CURLSSLOPT_NATIVE_CA so that it
does not override CURLOPT_CAINFO / CURLOPT_CAPATH, or the hardcoded
default locations. Instead the native Windows CA store can be used at
the same time.

---

This behavior was originally added over two years ago in abbc5d60
(#5585) but then 83393b1a (#7892) broke it over a year ago, I assume
inadvertently.

The CURLSSLOPT_NATIVE_CA feature was marked experimental and likely
rarely used.

Ref: https://github.com/curl/curl/pull/5585
Ref: https://github.com/curl/curl/pull/7892
Ref: https://curl.se/mail/lib-2023-01/0019.html

Closes https://github.com/curl/curl/pull/10244
docs/EXPERIMENTAL.md
docs/libcurl/opts/CURLOPT_PROXY_SSL_OPTIONS.3
docs/libcurl/opts/CURLOPT_SSL_OPTIONS.3
lib/vtls/openssl.c