Curl_ossl_check_peer_cert always reports error

[ncaklovic]

I did this

When SSL_get_verify_result() fails in Curl_ossl_check_peer_cert() it always reports error ("SSL certificate OpenSSL verify result: ...")

I expected the following

In previous versions failf() call was under if (strict) so it was not shown always (changed under commit support Apple SecTrust configurations).

See the code in 8.16 compared to 8.17.

I guesss adding if (strict) back should be enough to return expected default behavior.

curl/libcurl version

8.17.0

operating system

Windows 11

[icing]

Thanks. I made #19625 to restore the previous behaviour. Does this look like what you are looking for?

[ncaklovic]

Yes, it should be enough. Thanks