]> git.ipfire.org Git - thirdparty/curl.git/commit
openssl: Don't ignore CA paths when using Windows CA store 5585/head
authorJay Satiro <raysatiro@yahoo.com>
Mon, 22 Jun 2020 16:01:32 +0000 (12:01 -0400)
committerJay Satiro <raysatiro@yahoo.com>
Mon, 22 Jun 2020 19:31:38 +0000 (15:31 -0400)
commitabbc5d6044f95ba84acaae6912b2d097c6b435d1
treea6e27c4703269f08accfb41cb1245fe610490d1f
parentbc052cc87858684774849398ad1073d56d7f09e9
openssl: Don't ignore CA paths when using Windows CA store

This commit changes the behavior of CURLSSLOPT_NATIVE_CA so that it does
not override CURLOPT_CAINFO / CURLOPT_CAPATH, or the hardcoded default
locations. Instead the CA store can now be used at the same time.

The change is due to the impending release. The issue is still being
discussed. The behavior of CURLSSLOPT_NATIVE_CA is subject to change and
is now documented as experimental.

Ref: bc052cc (parent commit)
Ref: https://github.com/curl/curl/issues/5585
docs/EXPERIMENTAL.md
docs/libcurl/opts/CURLOPT_SSL_OPTIONS.3
lib/vtls/openssl.c