https://bugs.documentfoundation.org/show_bug.cgi?id=164781

--- Comment #32 from Patrick (volunteer) <[email protected]> ---
(In reply to Xisco FaulĂ­ from comment #31)
> Hi Patrick,
> What happens if you remove line 55 from
> external/curl/ExternalProject_curl.mk from my patch
> 
> $(if $(filter iOS MACOSX,$(OS)),--with-apple-sectrust) \
> 
> Does it fail to use macOS native certificate store ?

Interestingly, after a "make clean" in external/curl and then "make" at the top
of the tree, the "Load URL" toolbar button still loads
https://bugs.documentfoundation.org/show_bug.cgi?id=164781.

But removing the --with-apple-sectrust definitely stops linking of the macOS
Security framework so I assume cURL is using its own internal certificate
store.

Here's the differences I see:

1. otool -L ./instdir/LibreOfficeDev.app/Contents/Frameworks/libcurl.4.dylib:
   - with --with-apple-sectrust: macOS Security framework in link list
   - without --with-apple-sectrust: Security framework *not* in link list

2. nm -u ./instdir/LibreOfficeDev.app/Contents/Frameworks/libcurl.4.dylib:
   - with --with-apple-sectrust: includes the following Security framework
unctions:
     _SecCertificateCreateWithData
     _SecPolicyCreateRevocation
     _SecPolicyCreateSSL
     _SecTrustCreateWithCertificates
     _SecTrustEvaluateWithError
     _SecTrustSetOCSPResponse
   - without --with-apple-sectrust: does not include any Security framework
functions.

Hope that helps.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to