]> git.ipfire.org Git - thirdparty/curl.git/commit
tool_operate: Don't use Windows CA store as a fallback
authorJay Satiro <raysatiro@yahoo.com>
Sat, 20 Jun 2020 06:39:37 +0000 (02:39 -0400)
committerJay Satiro <raysatiro@yahoo.com>
Mon, 22 Jun 2020 19:26:07 +0000 (15:26 -0400)
commitbc052cc87858684774849398ad1073d56d7f09e9
tree656e548aa5322b70247429450c19b37545176e39
parentc9c31b9245e5c9962367b5bd6d2a3641886d0e62
tool_operate: Don't use Windows CA store as a fallback

Background:

148534d added CURLSSLOPT_NATIVE_CA to use the Windows OS certificate
store in libcurl w/ OpenSSL on Windows. CURLSSLOPT_NATIVE_CA overrides
CURLOPT_CAINFO if both are set. The curl tool will fall back to
CURLSSLOPT_NATIVE_CA if it could not find a certificate bundle to set
via CURLOPT_CAINFO.

Problem:

libcurl may be built with hardcoded paths to a certificate bundle or
directory, and if CURLSSLOPT_NATIVE_CA is used then those paths are
ignored.

Solution:

A solution is still being discussed but since there's an impending
release this commit removes using CURLSSLOPT_NATIVE_CA in the curl tool.

Ref: https://github.com/curl/curl/issues/5585
src/tool_operate.c