Skip to content

Curl 7.82.0 wolfSSL Patch for Kirkstone#100

Merged
dgarske merged 1 commit intowolfSSL:masterfrom
night1rider:curl-fips-patch
Jun 11, 2025
Merged

Curl 7.82.0 wolfSSL Patch for Kirkstone#100
dgarske merged 1 commit intowolfSSL:masterfrom
night1rider:curl-fips-patch

Conversation

@night1rider
Copy link
Copy Markdown
Contributor

@night1rider night1rider commented Apr 16, 2025

Found due to ZD 19717

When using Kirkstone, it will use Curl 7.82.0 by default.

Curl during compile will run a test compile to check that wolfSSL can be included and works.

This version of Curl does not include #include <wolfssl/options.h> in the test. This means that some builds of wolfSSL will fail
with an error like such:

/usr/include/wolfssl/wolfcrypt/wolfmath.h:38:14: fatal error: wolfssl/wolfcrypt/sp_int.h: No such file or directory
   38 |     #include <wolfssl/wolfcrypt/sp_int.h>

This will lead Curl to disable SSL all together, however it will not fail the build. So it can go unnoticed in the logs:

configure:27966: WARNING: SSL disabled, you will not be able to use HTTPS, FTPS, NTLM and more.
configure:27968: WARNING: Use --with-openssl, --with-gnutls, --with-wolfssl, --with-mbedtls, --with-nss, --with-schannel, --with-secure-transport, --with-amissl, --with-bearssl or --with-rustls to address this.

This was fixed in Curl in Pull Request 9187

This PR Adds a patch file and the needed hooks so that wolfSSL can compile without issue for the Curl test.

This was tested using a fips build of wolfssl which will trigger this error

@night1rider night1rider self-assigned this Apr 16, 2025
@dgarske dgarske merged commit 2cfe6d8 into wolfSSL:master Jun 11, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants