mirror of
https://github.com/yhirose/cpp-httplib.git
synced 2026-10-19 11:19:36 +00:00
yhiroseandClaude Opus 5.5
9f6dcf1230
* Carry the server certificate verifier over to the redirect client create_redirect_client() now copies the CA store and the session verifier to the SSLClient it builds for a cross-host https redirect (#2632), but a verifier given to set_server_certificate_verifier() was still dropped: the redirect client's ctx never had the verify callback wired in, so a pinning verifier never ran on the host the server redirects to. SSLClient now keeps its own copy of the verifier, since ctx_ cannot report it back and the backends hold it in a slot shared by every client, and installs it on the redirect client. The copy also replaces the Windows-only server_certificate_verifier_set_ flag. SSLClientRedirectTest.ServerCertificateVerifier fails before this change and passes after (OpenSSL 3, Mbed TLS 2.28, wolfSSL 5.6). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WGAYpQgXt95LdDQcJYgjB8 * Clarify the server_certificate_verifier_ comment The backends keep the verify callback in a per-thread slot, not one shared by every client. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WGAYpQgXt95LdDQcJYgjB8 --------- Co-authored-by: Claude <noreply@anthropic.com>
