]> git.ipfire.org Git - thirdparty/curl.git/commit
ssl: support Apple SecTrust configurations
authorStefan Eissing <stefan@eissing.org>
Wed, 24 Sep 2025 08:19:46 +0000 (10:19 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Fri, 3 Oct 2025 10:02:23 +0000 (12:02 +0200)
commiteefd03c572996e5de4dec4fe295ad6f103e0eefc
tree1aae19890a5f833edd0b652d81ff9688dca7fbcb
parent9cc1ee55a4a363e6a13408bfac58f4f7a17e625f
ssl: support Apple SecTrust configurations

- configure/cmake support for enabling the option
- supported in OpenSSL and GnuTLS backends
- when configured, Apple SecTrust is the default trust store
  for peer verification. When one of the CURLOPT_* for adding
  certificates is used, that default does not apply.
- add documentation of build options and SSL use

Closes #18703
29 files changed:
.github/scripts/spellcheck.words
.github/workflows/configure-vs-cmake.yml
.github/workflows/macos.yml
CMakeLists.txt
acinclude.m4
configure.ac
docs/INSTALL-CMAKE.md
docs/INSTALL.md
docs/SSLCERTS.md
docs/cmdline-opts/ca-native.md
lib/Makefile.inc
lib/curl_config.h.cmake
lib/setopt.c
lib/url.c
lib/urldata.h
lib/vquic/vquic-tls.c
lib/vtls/apple.c [new file with mode: 0644]
lib/vtls/apple.h [new file with mode: 0644]
lib/vtls/gtls.c
lib/vtls/gtls.h
lib/vtls/openssl.c
lib/vtls/openssl.h
lib/vtls/vtls.c
lib/vtls/vtls_scache.c
m4/curl-apple-sectrust.m4 [new file with mode: 0644]
tests/data/test305
tests/http/test_02_download.py
tests/http/test_07_upload.py
tests/http/test_17_ssl_use.py