openssl: clear retry flag on x509 error

When loading the trust anchors and encountering an error, clear
a possibly set retry flag.

Reported in Joshua's sarif data

Closes #18724
This commit is contained in:
Stefan Eissing 2025-09-25 12:11:15 +02:00 committed by Daniel Stenberg
parent 5f4f70e06d
commit 887b863b00
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -741,6 +741,7 @@ static int ossl_bio_cf_in_read(BIO *bio, char *buf, int blen)
if(!octx->x509_store_setup) {
r2 = Curl_ssl_setup_x509_store(cf, data, octx->ssl_ctx);
if(r2) {
BIO_clear_retry_flags(bio);
octx->io_result = r2;
return -1;
}