curl/lib/vtls
Joshua Rogers 81da4ee249
vtls: use Curl_safecmp for CRLfile and pinned_key comparison
Both are filesystem paths (or case-sensitive hash strings for
pinned_key). curl_strequal is case-insensitive and would treat
/etc/ssl/Crl.pem and /etc/ssl/crl.pem as the same file, unlike the other
path fields (CApath, CAfile, issuercert, clientcert) which already use
Curl_safecmp.

Closes #21668
2026-05-19 15:10:47 +02:00
..
apple.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
apple.h
cipher_suite.c
cipher_suite.h
gtls.c gnutls: fix more nettle 4+ compatibility issues 2026-05-12 05:33:08 +02:00
gtls.h gtls: fix some typos 2026-05-05 08:46:26 +02:00
hostcheck.c
hostcheck.h
keylog.c rustls: fix memory leak on repeated SSLKEYLOGFILE fails 2026-04-23 22:58:39 +02:00
keylog.h
mbedtls.c mbedtls: null terminate the private key blob 2026-05-07 07:57:56 +02:00
mbedtls.h
openssl.c tidy-up: prefer "initialize" with a 'z' 2026-05-15 11:49:06 +02:00
openssl.h tidy-up: sort TLS backends, distros, alphabetically 2026-05-11 11:57:25 +02:00
rustls.c rustls: drop two wrong leftover casts to ssize_t 2026-05-15 12:16:02 +02:00
rustls.h
schannel.c windows: update MS SDK versions in comments 2026-05-15 03:41:33 +02:00
schannel.h
schannel_int.h windows: update MS SDK versions in comments 2026-05-15 03:41:33 +02:00
schannel_verify.c schannel: enforce Extended Key Usage for custom CA roots 2026-05-16 11:55:59 +02:00
vtls.c vtls: use Curl_safecmp for CRLfile and pinned_key comparison 2026-05-19 15:10:47 +02:00
vtls.h ECH: cleanups 2026-05-08 13:09:45 +02:00
vtls_int.h
vtls_scache.c vtls_scache: include signature_algorithms in the SSL peer cache key 2026-05-18 13:59:11 +02:00
vtls_scache.h
vtls_spack.c
vtls_spack.h
wolfssl.c ECH: cleanups 2026-05-08 13:09:45 +02:00
wolfssl.h
x509asn1.c x509asn1: fix DH public key parameter extraction 2026-05-16 01:06:56 +02:00
x509asn1.h