luo980/curl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

url: don't set default CA paths for Secure Transport backend

Browse Source 
As the default for this backend is the native CA store.

Closes #12704
This commit is contained in:
Jay Wu 2024-01-15 12:24:45 +08:00 committed by Daniel Stenberg
parent 4224d6e0f3
commit c5801a28c5
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/url.c
View File

@ -434,11 +434,13 @@ CURLcode Curl_init_userdefined(struct Curl_easy *data)
/* Set the default CA cert bundle/path detected/specified at build time. /* Set the default CA cert bundle/path detected/specified at build time.
* *
* If Schannel is the selected SSL backend then these locations are * If Schannel or SecureTransport is the selected SSL backend then these
* ignored. We allow setting CA location for schannel only when explicitly * locations are ignored. We allow setting CA location for schannel and
* specified by the user via CURLOPT_CAINFO / --cacert. * securetransport when explicitly specified by the user via
* CURLOPT_CAINFO / --cacert.
*/ */
if(Curl_ssl_backend() != CURLSSLBACKEND_SCHANNEL) { if(Curl_ssl_backend() != CURLSSLBACKEND_SCHANNEL &&
Curl_ssl_backend() != CURLSSLBACKEND_SECURETRANSPORT) {
#if defined(CURL_CA_BUNDLE) #if defined(CURL_CA_BUNDLE)
result = Curl_setstropt(&set->str[STRING_SSL_CAFILE], CURL_CA_BUNDLE); result = Curl_setstropt(&set->str[STRING_SSL_CAFILE], CURL_CA_BUNDLE);
if(result) if(result)