]> git.ipfire.org Git - thirdparty/curl.git/commitdiff
wolfssl: require WOLFSSL_SYS_CA_CERTS for loading system CA
authorDaniel Stenberg <daniel@haxx.se>
Fri, 13 Oct 2023 07:00:50 +0000 (09:00 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Fri, 13 Oct 2023 08:58:23 +0000 (10:58 +0200)
This define is set in wolfssl's options.h file when this function and
feature is present. Handles both builds with the feature explicitly
disabled and wolfSSL versions before 5.5.2 - which introduced this API
call.

Closes #12108

lib/vtls/wolfssl.c

index b1384a644baa078b46ae64be4aeec2df606857b2..135ba697edccab80a5679c3863ac1ce4ce45c881 100644 (file)
@@ -513,7 +513,7 @@ wolfssl_connect_step1(struct Curl_cfilter *cf, struct Curl_easy *data)
     }
   }
 
-#ifndef NO_FILESYSTEM
+#if !defined(NO_FILESYSTEM) && defined(WOLFSSL_SYS_CA_CERTS)
   /* load native CA certificates */
   if(ssl_config->native_ca_store) {
     if(wolfSSL_CTX_load_system_CA_certs(backend->ctx) != WOLFSSL_SUCCESS) {