Skip to content

mbedtls: remove pinnedpubkey support if MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is not defined#20319

Closed
MAntoniak wants to merge 1 commit intocurl:masterfrom
MAntoniak:mbedtls_pinnedpubkey
Closed

mbedtls: remove pinnedpubkey support if MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is not defined#20319
MAntoniak wants to merge 1 commit intocurl:masterfrom
MAntoniak:mbedtls_pinnedpubkey

Conversation

@MAntoniak
Copy link
Contributor

Behavior similar to when MBEDTLS_PK_WRITE_C is not defined.

@github-actions github-actions bot added the TLS label Jan 14, 2026
}

#if defined(MBEDTLS_PK_WRITE_C) && defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE)
#define PINNED_PUBKEY_SUPPORTED
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
#define PINNED_PUBKEY_SUPPORTED
#define HAVE_PINNED_PUBKEY

To align with internal names used in similar cases.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

@MAntoniak MAntoniak force-pushed the mbedtls_pinnedpubkey branch from 7afac48 to efdca85 Compare January 14, 2026 14:56
@vszakats vszakats changed the title mbedtls: remove pinnedpubkey support if MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is not defined. mbedtls: remove pinnedpubkey support if MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is not defined Jan 14, 2026
@bagder
Copy link
Member

bagder commented Jan 14, 2026

I think the SSLSUPP_PINNEDPUBKEY flag in the struct Curl_ssl should be toggled off as well if the option does not work.

…CATE is not defined.

Behavior similar to when MBEDTLS_PK_WRITE_C is not defined.
@MAntoniak MAntoniak force-pushed the mbedtls_pinnedpubkey branch from efdca85 to 08a0ecc Compare January 15, 2026 08:29
@MAntoniak
Copy link
Contributor Author

I think the SSLSUPP_PINNEDPUBKEY flag in the struct Curl_ssl should be toggled off as well if the option does not work.

Yes, indeed. I've toggled off this flag already.

@bagder bagder closed this in 75c7d2a Jan 15, 2026
@bagder
Copy link
Member

bagder commented Jan 15, 2026

Thanks!

@MAntoniak MAntoniak deleted the mbedtls_pinnedpubkey branch January 16, 2026 08:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

3 participants