curl/lib/vtls
Stefan Eissing b4630ed8fa
sectrust: fix verifystatus via sectrust
When openssl does not verify the certificate, but apple sectrust
does, we also pass it the ocsp stapled response when configured and
available.

When openssl does not verify the cert chain, it will also not be able
to verify the ocsp stapling. Do not call it if sectrust is the
verifier of the cert chain.

Fixes #19307
Reported-by: Harry Sintonen
Closes #19308
2025-10-31 23:10:35 +01:00
..
apple.c apple sectrust: add to features 2025-10-16 10:58:45 +02:00
apple.h apple sectrust: add to features 2025-10-16 10:58:45 +02:00
cipher_suite.c lib: stop overriding system printf symbols 2025-10-06 20:57:59 +02:00
cipher_suite.h TLS: remove support for Secure Transport and BearSSL 2025-06-11 07:54:19 +02:00
gtls.c ssl-session-cache: check use on config and availability 2025-10-29 03:07:59 -04:00
gtls.h ssl: support Apple SecTrust configurations 2025-10-03 12:02:23 +02:00
hostcheck.c tidy-up: more whitespace/indent, comments 2025-07-25 11:47:51 +02:00
hostcheck.h openssl: some small cleanups 2025-07-18 00:40:26 +02:00
keylog.c build: avoid overriding system symbols for fopen functions 2025-09-30 01:10:36 +02:00
keylog.h spelling: 'a' vs 'an' 2025-05-30 11:38:35 +02:00
mbedtls.c ssl-session-cache: check use on config and availability 2025-10-29 03:07:59 -04:00
mbedtls.h lib: include files using known path 2025-04-08 17:00:00 +02:00
mbedtls_threadlock.c lib: stop overriding system printf symbols 2025-10-06 20:57:59 +02:00
mbedtls_threadlock.h lib: include files using known path 2025-04-08 17:00:00 +02:00
openssl.c sectrust: fix verifystatus via sectrust 2025-10-31 23:10:35 +01:00
openssl.h ssl: support Apple SecTrust configurations 2025-10-03 12:02:23 +02:00
rustls.c rustls: exit on error 2025-10-19 23:47:47 +02:00
rustls.h lib: include files using known path 2025-04-08 17:00:00 +02:00
schannel.c ssl-session-cache: check use on config and availability 2025-10-29 03:07:59 -04:00
schannel.h openssl: BoringSSL / AWS-LC tidy-ups 2025-08-24 00:30:06 +02:00
schannel_int.h vtls: drop duplicate CURL_SHA256_DIGEST_LENGTH definition 2025-10-24 19:16:53 +02:00
schannel_verify.c schannel_verify: do not call infof with an appended \n 2025-10-18 22:15:26 +02:00
vtls.c lib: reduce memcpy calls 2025-10-30 15:40:21 +01:00
vtls.h vtls: drop duplicate CURL_SHA256_DIGEST_LENGTH definition 2025-10-24 19:16:53 +02:00
vtls_int.h vtls_int.h: clarify data_pending 2025-09-21 09:43:28 +02:00
vtls_scache.c ssl-session-cache: check use on config and availability 2025-10-29 03:07:59 -04:00
vtls_scache.h ssl-session-cache: check use on config and availability 2025-10-29 03:07:59 -04:00
vtls_spack.c build: fix build errors/warnings in rare configurations 2025-07-23 22:17:03 +02:00
vtls_spack.h build: fix build errors/warnings in rare configurations 2025-07-23 22:17:03 +02:00
wolfssl.c ssl-session-cache: check use on config and availability 2025-10-29 03:07:59 -04:00
wolfssl.h GHA/checksrc: expand spellcheck, fix issues found 2025-07-21 16:09:01 +02:00
x509asn1.c lib: stop overriding system printf symbols 2025-10-06 20:57:59 +02:00
x509asn1.h build: address some -Weverything warnings, update picky warnings 2025-09-20 10:16:15 +02:00