[PATCH] openssl: toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
authorDaniel Stenberg <daniel@haxx.se>
Wed, 17 Dec 2025 09:54:16 +0000 (10:54 +0100)
committerSamuel Henrique <samueloph@debian.org>
Fri, 8 May 2026 14:16:21 +0000 (07:16 -0700)
commit9d5772ec1269c4646c537d0d8c9c97e6505f233f
tree74505e86aaf264ff1a51651c074eeea8b20ef0d0
parent47e36cfbe1151972715b014a4f658b405b60d660
[PATCH] openssl: toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache

Reported-by: Stanislav Fort
Closes #20009

Backported-by: Samuel Henrique <samueloph@debian.org>
 * Refresh patch context for lib/vtls/openssl.c

Backported by: Samuel Henrique <samueloph@debian.org>
 * Bookworm 7.88.1 names the cache struct `multi_ssl_backend_data`
   (vs `ossl_x509_share` in 8.14.1+) and the helpers `cached_x509_store_*`
   (without the `ossl_` prefix). Apply the same logic against those names.
   Replace the upstream `CURL_UNCONST(data)` macro with a plain
   `(struct Curl_easy *)data` cast since CURL_UNCONST does not exist in
   bookworm.

Gbp-Pq: Name CVE-2025-14819.patch
lib/vtls/openssl.c