rustls: error on CURLOPT_CRLFILE with native CA store

Closes #21614
This commit is contained in:
Joshua Rogers 2026-05-14 23:19:54 +02:00 committed by Daniel Stenberg
parent 976eb1d50d
commit 88bb7f885f
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2

View file

@ -1042,6 +1042,12 @@ static CURLcode cr_init_backend(struct Curl_cfilter *cf,
config_builder, cr_verify_none);
}
else if(ssl_config->native_ca_store) {
if(conn_config->CRLfile) {
failf(data, "rustls: CRL file not supported with native CA store; "
"the platform verifier has no CRL attachment API");
rustls_client_config_builder_free(config_builder);
return CURLE_NOT_BUILT_IN;
}
result = init_config_builder_platform_verifier(data, config_builder);
if(result != CURLE_OK) {
rustls_client_config_builder_free(config_builder);