Skip to content

macos sectrust: fail ocsp verify when not builtin - #22690

Closed
icing wants to merge 2 commits into
curl:masterfrom
icing:sectrust-fail-unsupported-oscp-verify
Closed

icing wants to merge 2 commits into
curl:masterfrom
icing:sectrust-fail-unsupported-oscp-verify

Conversation

@icing

@icing icing commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

When compiling macOS SecTrust with a compiler that does not support __builtin_available(), OCSP verfication is not available. This means it is not Apple's clang.

Instead of ignoring this, fail the handshake when ocsp status is requested.

When compiling macOS SecTrust with a compiler that does not
support __builtin_available(), OCSP verfication is not available.
This means it is not Apple's clang.

Instead of ignoring this, fail the handshake when ocsp status
is requested.
@github-actions github-actions Bot added TLS appleOS specific to an Apple operating system labels Aug 26, 2026
@icing
icing requested a review from bagder August 26, 2026 13:40
@testclutch

Copy link
Copy Markdown

Analysis of PR #22690 at b61f2532:

Test 322 failed, which has NOT been flaky recently, so there could be a real issue in this PR. Note that this test has failed in 12 different CI jobs (the link just goes to one of them).

Generated by Testclutch

@bagder bagder closed this in 4433f71 Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

appleOS specific to an Apple operating system TLS

Development

Successfully merging this pull request may close these issues.

3 participants