romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 11:33:33 +03:00
Code Issues Projects Releases Packages Wiki Activity

config2setopts: restore proper ignoring of CAINFO BLOB option errors

Browse source 
A regression from refactors

Spotted by Codex Security

Closes #20799
This commit is contained in:
Daniel Stenberg 2026-03-03 18:03:52 +01:00
parent 7577ed7e86
commit 3d4a701233
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/config2setopts.c
View file

@ -308,9 +308,10 @@ static CURLcode ssl_ca_setopts(struct OperationConfig *config, CURL *curl)
blob.flags = CURL_BLOB_NOCOPY;
notef("Using embedded CA bundle (%zu bytes)", blob.len);
result = curl_easy_setopt(curl, CURLOPT_CAINFO_BLOB, &blob);
if(result == CURLE_NOT_BUILT_IN) {
if((result == CURLE_NOT_BUILT_IN) || (result == CURLE_UNKNOWN_OPTION)) {
warnf("ignoring %s, not supported by libcurl with %s",
"embedded CA bundle", ssl_backend());
result = CURLE_OK;
}
}
if(!config->proxy_cacert && !config->proxy_capath) {
@ -320,9 +321,10 @@ static CURLcode ssl_ca_setopts(struct OperationConfig *config, CURL *curl)
blob.flags = CURL_BLOB_NOCOPY;
notef("Using embedded CA bundle, for proxies (%zu bytes)", blob.len);
result = curl_easy_setopt(curl, CURLOPT_PROXY_CAINFO_BLOB, &blob);
if(result == CURLE_NOT_BUILT_IN) {
if((result == CURLE_NOT_BUILT_IN) || (result == CURLE_UNKNOWN_OPTION)) {
warnf("ignoring %s, not supported by libcurl with %s",
"embedded CA bundle", ssl_backend());
result = CURLE_OK;
}
}
#endif