From f67090679f3227bbc31061c8074b07245cb8cc08 Mon Sep 17 00:00:00 2001 From: Viktor Szakats Date: Sat, 23 Aug 2025 20:52:16 +0200 Subject: [PATCH] openssl: sync an AWS-LC guard with BoringSSL BoringSSL always used the same type: https://boringssl.googlesource.com/boringssl/+/103ed08549a74af9f03363c633028faf9a475066 https://github.com/google/boringssl/commit/103ed08549a74af9f03363c633028faf9a475066 But, this codepath isn't built with BoringSSL, because it defines `OPENSSL_NO_OCSP` via `opensslconf.h`. Also drop an out-of-place `#endif` comment. Ref: 20f4e94eebbdcfe590ae99cb8a3f2ca1b8f970a0 #11568 Closes #18384 --- lib/vtls/openssl.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c index 5aa27df759..45469205cf 100644 --- a/lib/vtls/openssl.c +++ b/lib/vtls/openssl.c @@ -2504,7 +2504,7 @@ static CURLcode verifystatus(struct Curl_cfilter *cf, struct ossl_ctx *octx) { int i, ocsp_status; -#ifdef OPENSSL_IS_AWSLC +#ifdef HAVE_BORINGSSL_LIKE const uint8_t *status; #else unsigned char *status; @@ -5580,7 +5580,7 @@ size_t Curl_ossl_version(char *buffer, size_t size) (ssleay_value >> 20) & 0xff, (ssleay_value >> 12) & 0xff, sub); -#endif /* OPENSSL_IS_BORINGSSL */ +#endif } /* can be called with data == NULL */