]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7eb31c8) | patch
gnutls: support CURLSSLOPT_NATIVE_CA
authorDaniel Stenberg <daniel@haxx.se>
Mon, 16 Oct 2023 12:46:36 +0000 (14:46 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Sat, 21 Oct 2023 12:41:06 +0000 (14:41 +0200)
commit9cf47593542c6f5fb09e5c2651a56706e953d87d
tree2ea1546cf66243fb70d79e9205a08bf7956f48detree | snapshot
parent7eb31c852dc50ab04fbdb0b56ef5a54fedcdd1e0commit | diff
gnutls: support CURLSSLOPT_NATIVE_CA

Remove the CURL_CA_FALLBACK logic. That build option was added to allow
primarily OpenSSL to use the default paths for loading the CA certs. For
GnuTLS it was instead made to load the "system certs", which is
different and not desirable.

The native CA store loading is now asked for with this option.

Follow-up to 7b55279d1d856

Co-authored-by: Jay Satiro
Closes #12137
docs/libcurl/opts/CURLOPT_PROXY_SSL_OPTIONS.3 diff | blob | blame | history
docs/libcurl/opts/CURLOPT_SSL_OPTIONS.3 diff | blob | blame | history
lib/vtls/gtls.c diff | blob | blame | history
Mirror of https://github.com/curl/curl.git