Bug 248165

Summary:	[Curl] Use CURLOPT_CAINFO_BLOB to set Certificate Authority bundle
Product:	WebKit	Reporter:	Kenji Shukuwa <kenji.shukuwa>
Component:	Platform	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	Hironori.Fujii, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Kenji Shukuwa 2022-11-20 23:19:05 PST

We are currently using the SSL_CTX_load_verify_mem function that is a libressl-specific function to set the Certificate Authority bundle from memory.
However, a similar process can be done with OpenSSL and its forks by using CURLOPT_CAINFO_Blob, which is supported since libcurl 7.77.0.

Comment 1 Kenji Shukuwa 2022-11-20 23:25:39 PST

Pull request: https://github.com/WebKit/WebKit/pull/6693

Comment 2 EWS 2022-11-21 03:56:58 PST

Committed 256904@main (a845b7e4ec04): <https://commits.webkit.org/256904@main>

Reviewed commits have been landed. Closing PR #6693 and removing active labels.

Comment 3 Radar WebKit Bug Importer 2022-11-21 03:57:17 PST

<rdar://problem/102579058>