Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

configure: check for the capath by default #11987

Closed
wants to merge 2 commits into from
Closed

configure: check for the capath by default #11987

wants to merge 2 commits into from

Commits on Sep 29, 2023

  1. wolfssl: ignore errors in CA path 

    The default wolfSSL_CTX_load_verify_locations() function is quite picky
with the certificates it loads and will for example return error if just
one of the certs has expired.

With the *_ex() function and its WOLFSSL_LOAD_FLAG_IGNORE_ERR flag, it
behaves more similar to what OpenSSL does by default.

Even the set of default certs on my Debian unstable has several expired
ones.

Assisted-by: Juliusz Sosinowicz
Assisted-by: Michael Osipov

Closes #11987
    @bagder
    bagder committed Sep 29, 2023
    Configuration menu
    Copy the full SHA
    3f235be View commit details
    Browse the repository at this point in the history

  2. configure: check for the capath by default 

    ... if the chosen TLS backend supports it: OpenSSL, GnuTLS, mbedTLS or wolfSSL

cmake: synced

Assisted-by: Viktor Szakats
Closes #11987
    @bagder
    bagder committed Sep 29, 2023
    Configuration menu
    Copy the full SHA
    ed81eb2 View commit details
    Browse the repository at this point in the history