metsw24-max ba32b468a4 Honour Keychain trust settings when loading macOS system CAs (#2641) ...

The macOS system CA loader took every certificate that has Trust Settings, in the system, admin or user domain, as a trusted root without reading those settings. A root set to "Never Trust" in Keychain Access, or trusted only for S/MIME or code signing, still verified TLS servers.

The loader now evaluates the settings for the SSL policy. A per-user setting overrides the admin domain, which overrides the system domain, and only TrustRoot and TrustAsRoot are loaded. The OpenSSL path shares the helper that the Mbed TLS and wolfSSL paths already use.

2026-10-25 21:41:36 -04:00

..

fuzzing

Fuzz the buffered path of the line reader

2026-10-16 16:39:00 -04:00

gtest

chore: fix some typos in comments (#2282)

2025-11-27 20:34:18 -05:00

proxy

Self-host the httpbin auth-testing backend for BaseAuthTest/DigestAuthTest

2026-09-07 21:49:00 -04:00

www

build(meson): copy MountTest.MultibytesPathName files (#2098)

2025-03-11 13:10:30 -04:00

www2/dir

meson: add tests (#1044)

2021-09-11 14:26:48 -04:00

www3/dir

meson: add tests (#1044)

2021-09-11 14:26:48 -04:00

ca-bundle.crt

Wildcard support for verifying server certificate. fix #87

2019-05-07 21:40:03 -04:00

CMakeLists.txt

Match a host name against subjectAltName only

2026-10-25 18:58:43 -04:00

dns_test_fixture.py

Reproducer test for #2431 (getaddrinfo_a use-after-free) (#2433)

2026-04-28 18:17:19 +09:00

gen-certs.sh

Match a host name against subjectAltName only

2026-10-25 18:58:43 -04:00

image.jpg

Add a file for test

2017-12-29 22:34:59 -05:00

include_httplib.cc

Add test of httplib.h split into .h + .cc (#1015)

2021-07-31 09:53:30 -04:00

include_windows_h.cc

Detect additional CMake build failures (#2058)

2025-02-16 15:45:28 -05:00

lsan_suppressions.txt

Suppress wolfSSL library leaks; remove fail-fast from test matrix

2026-04-29 07:55:09 +09:00

make-shared-library.sh

Improve ABI check tool on macOS

2025-02-12 12:49:20 -05:00

Makefile

let EXTRA_CXXFLAGS override -fsanitize=address (#2577)

2026-09-03 10:22:00 -04:00

meson.build

Match a host name against subjectAltName only

2026-10-25 18:58:43 -04:00

run_issue_2431_repro.sh

Reproducer test for #2431 (getaddrinfo_a use-after-free) (#2433)

2026-04-28 18:17:19 +09:00

test_32bit_build.cpp

Remove 32-bit limitation (#2388)

2026-03-06 23:07:21 -05:00

test_benchmark.cc

Add benchmark tests and related configurations for performance evaluation

2026-03-14 22:16:53 -04:00

test_proxy.cc

Send the client's credentials and proxy target on a stream request

2026-10-18 20:32:27 -04:00

test_thread_pool.cc

Make ThreadPool ctor exception-safe on partial thread creation (#2445)

2026-05-09 21:13:40 -04:00

test_websocket_heartbeat.cc

Run the pong timeout tests in the main test suite

2026-10-18 18:03:08 -04:00

test_websocket_thread_safety.cc

Fix TLS session data race on wss:// WebSocket connections (#2551)

2026-08-24 07:04:43 -04:00

test.cc

Honour Keychain trust settings when loading macOS system CAs (#2641)

2026-10-25 21:41:36 -04:00

test.conf

Merge the SSLClient and WebSocketClient TLS session setup

2026-08-07 13:41:39 -04:00

test.rootCA.conf

setup test cases for client certificates

2019-06-07 01:23:22 +08:00

test.sln

static file support. vc12 support.

2013-07-04 18:18:52 -04:00

test.vcxproj

Update vcxproj files

2024-11-16 11:14:13 -05:00