You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by re...@apache.org on 2026/01/14 11:01:53 UTC
(tomcat) branch 11.0.x updated: Skip OCSP for LibreSSL
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch 11.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/11.0.x by this push:
new 2499014dcb Skip OCSP for LibreSSL
2499014dcb is described below
commit 2499014dcb067a5c46078c2db7d164ff278ef5a4
Author: remm <re...@apache.org>
AuthorDate: Wed Jan 14 11:56:31 2026 +0100
Skip OCSP for LibreSSL
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index a474a52375..21a64a73b3 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1300,7 +1300,7 @@ public final class OpenSSLEngine extends SSLEngine implements SSLUtil.ProtocolIn
private static int processOCSPRequest(EngineState state, URL url, MemorySegment issuer, MemorySegment x509,
MemorySegment /* X509_STORE_CTX */ x509ctx, Arena localArena) {
- if (openssl_h_Compatibility.BORINGSSL) {
+ if (openssl_h_Compatibility.BORINGSSL || openssl_h_Compatibility.LIBRESSL) {
return V_OCSP_CERTSTATUS_UNKNOWN();
}
MemorySegment ocspRequest = MemorySegment.NULL;
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org