f099c2ca55
Stefan Eissing
2025-12-22
Subject
apple sectrust: fix ancient evaluation
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
lib/vtls/apple.c+5 -0
| @@ -261,12 +261,17 @@ CURLcode Curl_vtls_apple_verify(struct Curl_cfilter *cf, | |
| if(status != noErr) { | |
| failf(data, "Apple SecTrust verification failed: error %i", (int)status); | |
| + | result = CURLE_PEER_FAILED_VERIFICATION; |
| } | |
| else if((sec_result == kSecTrustResultUnspecified) || | |
| (sec_result == kSecTrustResultProceed)) { | |
| /* "unspecified" means system-trusted with no explicit user setting */ | |
| result = CURLE_OK; | |
| } | |
| + | else { |
| + | /* Any other trust result is a verification failure in this context */ |
| + | result = CURLE_PEER_FAILED_VERIFICATION; |
| + | } |
| #endif /* REQUIRES_SecTrustEvaluateWithError */ | |
| } | |