Skip to content

upstream @jef-n fix for cabundle (PDAL #5006) - #61

Merged
connormanning merged 1 commit into
connormanning:masterfrom
hobu:curl-ca-bundle
May 22, 2026
Merged

connormanning merged 1 commit into
connormanning:masterfrom
hobu:curl-ca-bundle

Conversation

@hobu

@hobu hobu commented May 22, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@connormanning
connormanning merged commit 5046813 into connormanning:master May 22, 2026
2 checks passed
connormanning pushed a commit that referenced this pull request Oct 30, 2026
Curl's move constructor (from #60) moved m_caPath, m_caInfo and m_proxy
but not m_caBundle (added in #61). Pool fills m_curls with emplace_back,
so the handles moved on reallocation lose the bundle:

- CURL_CA_BUNDLE, ARBITER_CA_BUNDLE and http.caBundle are ignored on
  those handles, and curl falls back to its default CA file
- CURL_CA_INFO / http.caInfo are unaffected

Tested against a local HTTPS S3 stub signed by a private CA, with the
CA given only via CURL_CA_BUNDLE or ARBITER_CA_BUNDLE: 5046813 (before
#60) fetches the object, master (3e5dde7) fails the TLS handshake, this
commit fetches it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants