Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Re: How to build curl against Apple LibreSSL
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Conrad Kramer via curl-library <curl-library_at_lists.haxx.se>
Date: Fri, 30 May 2025 19:14:22 -0700
This is so cool, thank you for doing this! Does it support TLS 1.3/ECH? If
so, that is a big improvement over the default SecureTransport.
I tried to add a Network.framework SSL backend to curl here:
https://github.com/conradev/curl. It was a bigger endeavour than I had
originally thought because it involves a new socket abstraction, but I
think it could still be possible to get working. I unfortunately don't have
time to continue working on it, but it's a starting point.
Conrad
On Thu, May 29, 2025 at 5:00 AM Jeroen Ooms via curl-library <
curl-library_at_lists.haxx.se> wrote:
> Perhaps someone else finds this useful: I made some notes and files on
> how to build curl against the stock LibreSSL and nghttp2 included with
> MacOS. This way your curl build matches the configuration of the stock
> curl from MacOS and needs no dependencies:
> https://github.com/jeroen/apple-libressl-sdk
>
> Apple made this unnecessarily complicated by not publishing their
> LibreSSL modifications nor providing the required SDK files to link
> with their custom LibreSSL, and on top of that shipping a pretty buggy
> curl version themselves.
>
> One reason why you may want this is when your keychain trust store
> contains custom certificates, which standard openssl/libressl backends
> do not support.
> --
> Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
> Etiquette: https://curl.se/mail/etiquette.html
>
Date: Fri, 30 May 2025 19:14:22 -0700
This is so cool, thank you for doing this! Does it support TLS 1.3/ECH? If
so, that is a big improvement over the default SecureTransport.
I tried to add a Network.framework SSL backend to curl here:
https://github.com/conradev/curl. It was a bigger endeavour than I had
originally thought because it involves a new socket abstraction, but I
think it could still be possible to get working. I unfortunately don't have
time to continue working on it, but it's a starting point.
Conrad
On Thu, May 29, 2025 at 5:00 AM Jeroen Ooms via curl-library <
curl-library_at_lists.haxx.se> wrote:
> Perhaps someone else finds this useful: I made some notes and files on
> how to build curl against the stock LibreSSL and nghttp2 included with
> MacOS. This way your curl build matches the configuration of the stock
> curl from MacOS and needs no dependencies:
> https://github.com/jeroen/apple-libressl-sdk
>
> Apple made this unnecessarily complicated by not publishing their
> LibreSSL modifications nor providing the required SDK files to link
> with their custom LibreSSL, and on top of that shipping a pretty buggy
> curl version themselves.
>
> One reason why you may want this is when your keychain trust store
> contains custom certificates, which standard openssl/libressl backends
> do not support.
> --
> Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
> Etiquette: https://curl.se/mail/etiquette.html
>
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2025-05-31