]> git.ipfire.org Git - thirdparty/curl.git/commitdiff
openssl: sync an AWS-LC guard with BoringSSL
authorViktor Szakats <commit@vsz.me>
Sat, 23 Aug 2025 18:52:16 +0000 (20:52 +0200)
committerViktor Szakats <commit@vsz.me>
Sat, 23 Aug 2025 20:57:30 +0000 (22:57 +0200)
BoringSSL always used the same type:
https://boringssl.googlesource.com/boringssl/+/103ed08549a74af9f03363c633028faf9a475066
https://github.com/google/boringssl/commit/103ed08549a74af9f03363c633028faf9a475066

But, this codepath isn't built with BoringSSL, because it defines
`OPENSSL_NO_OCSP` via `opensslconf.h`.

Also drop an out-of-place `#endif` comment.

Ref: 20f4e94eebbdcfe590ae99cb8a3f2ca1b8f970a0 #11568

Closes #18384

lib/vtls/openssl.c

index 5aa27df75980029740a3a80cfac83714bbafb7f3..45469205cf6150eed99971772288f4daddc8b75a 100644 (file)
@@ -2504,7 +2504,7 @@ static CURLcode verifystatus(struct Curl_cfilter *cf,
                              struct ossl_ctx *octx)
 {
   int i, ocsp_status;
-#ifdef OPENSSL_IS_AWSLC
+#ifdef HAVE_BORINGSSL_LIKE
   const uint8_t *status;
 #else
   unsigned char *status;
@@ -5580,7 +5580,7 @@ size_t Curl_ossl_version(char *buffer, size_t size)
                    (ssleay_value >> 20) & 0xff,
                    (ssleay_value >> 12) & 0xff,
                    sub);
-#endif /* OPENSSL_IS_BORINGSSL */
+#endif
 }
 
 /* can be called with data == NULL */