You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by re...@apache.org on 2026/01/14 10:56:40 UTC
(tomcat) branch main updated: Skip OCSP for LibreSSL
This is an automated email from the ASF dual-hosted git repository.
remm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new f21fb17d6a Skip OCSP for LibreSSL
f21fb17d6a is described below
commit f21fb17d6a828fd9d8b0cd0dac45abd1e2fbfd53
Author: remm <re...@apache.org>
AuthorDate: Wed Jan 14 11:56:31 2026 +0100
Skip OCSP for LibreSSL
---
java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
index 69fb642a86..ccae22e937 100644
--- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
+++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
@@ -1300,7 +1300,7 @@ public final class OpenSSLEngine extends SSLEngine implements SSLUtil.ProtocolIn
private static int processOCSPRequest(EngineState state, URL url, MemorySegment issuer, MemorySegment x509,
MemorySegment /* X509_STORE_CTX */ x509ctx, Arena localArena) {
- if (openssl_h_Compatibility.BORINGSSL) {
+ if (openssl_h_Compatibility.BORINGSSL || openssl_h_Compatibility.LIBRESSL) {
return V_OCSP_CERTSTATUS_UNKNOWN();
}
MemorySegment ocspRequest = MemorySegment.NULL;
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org