Re: System certificate store support in macOS

2025-08-25 Thread Ondra via curl-library
Hello, As you may know, I have recently triggered implementation of asynchronous openssl verification callback https://github.com/curl/curl/pull/18288 . I am using it to implement code similar to https://github.com/curl/curl/pull/17525 . It would be a great help to have this present under CURLS

Re: Asynchronous certificate verification and curl_multi

2025-08-14 Thread Ondra via curl-library
in the implementation, especially use of data->conn->bits.cert_verification_* from cf-socket.c looks like a hack, and keeping the easy in multi->process during this time seems unclean... On Wed, Aug 13, 2025 at 9:44 AM Daniel Stenberg wrote: > On Wed, 13 Aug 2025, Ondra via curl-l

Re: Asynchronous certificate verification and curl_multi

2025-08-13 Thread Ondra via curl-library
On Wed, Aug 13, 2025 at 3:16 PM Daniel Stenberg wrote: > > Shouldn't the callback pause the transfer when it can't verify the > certificate > right now but thinks it will magically have information in the future. > > Then in a future when it has the information it resumes/unpauses the > handle >

Re: Asynchronous certificate verification and curl_multi

2025-08-13 Thread Ondra via curl-library
in cf_socket_ctx? On Wed, Aug 13, 2025 at 11:58 AM Stefan Eissing via curl-library < curl-library@lists.haxx.se> wrote: > > > > Am 13.08.2025 um 09:44 schrieb Daniel Stenberg via curl-library < > curl-library@lists.haxx.se>: > > > > On Wed, 13 Aug 2025, Ondra via curl-

Re: Asynchronous certificate verification and curl_multi

2025-08-13 Thread Ondra via curl-library
> > > Am 13.08.2025 um 09:44 schrieb Daniel Stenberg via curl-library < > curl-library@lists.haxx.se>: > > > > On Wed, 13 Aug 2025, Ondra via curl-library wrote: > > > >> According to https://curl.se/libcurl/c/CURLOPT_SSL_CTX_FUNCTION.html, >

Asynchronous certificate verification and curl_multi

2025-08-13 Thread Ondra via curl-library
Hello, I am attempting to implement asynchronous certificate verification for curl_multi running multiple curl_easy with CURLMOPT_SOCKETFUNCTION set to use a custom event loop. According to https://curl.se/libcurl/c/CURLOPT_SSL_CTX_FUNCTION.html, “For OpenSSL, asynchronous certificate verificatio