Builder curl-threaded-solaris11-sparc Build #5217

Results:

Build successful

SourceStamp:

BuildSlave:

Reason:

The SingleBranchScheduler scheduler named 'schedule-curl-threaded-solaris11-sparc' triggered this build

Steps and Logfiles:

1. git update ( 7 secs )
   1. stdio
2. Runtest './tests/testcurl.pl --nogitpull ...' ( 22 mins, 21 secs )
   1. stdio
   2. resultlog
3. Mail result 'cat resultlog ...' ( 0 secs )
   1. stdio

Build Properties:

Forced Build Properties:

Responsible Users:

1. Stefan Eissing

   stefanohnoyoudont@eissing.org

Timing:

All Changes:

:

1. Change #256478

   Category	curl
   Changed by	Stefan Eissing <stefanohnoyoudont@eissing.org>
   Changed at	Tue 27 Jan 2026 14:03:47
   Repository	https://github.com/curl/curl.git
   Project	curl
   Branch	master
   Revision	065b149df07256174891dfcde307c39c98908d5f

   Comments

   OpenSSL: check reuse of sessions for verify status
   OpenSSL records its peer verification status inside its SSL_SESSION
   objects. When a session is later reused, the SSL connection inherits
   this verify status.
   
   Session keys prevent reuse of sessions between connections that verify
   the peer and those who do not. However, when Apple SecTrust is used
   to verify a connection, this does not update the Sessions verify
   status (and there is no setter). On session reuse, OpenSSL fails
   the verification and Apple SecTrust cannot verify either since the
   certificate peer chain is not available.
   
   Fix this by checking the verification status on session reuse and
   remove the session again if the peer needs to be verified, but the
   session is not.
   
   Reported-by: Christian Schmitza
   Fixes #20435
   Closes #20446

   Changed files

   • lib/vtls/gtls.c
   • lib/vtls/openssl.c
   • tests/http/test_02_download.py
   • tests/http/test_08_caddy.py
   • tests/http/test_17_ssl_use.py
   • tests/http/test_19_shutdown.py
   • tests/libtest/cli_hx_download.c