This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat-native.git
The following commit(s) were added to refs/heads/main by this push:
new 435b86a3b Fix a compilation warning
435b86a3b is described below
commit 435b86a3b2329872b23bba71e7a41c864d516a66
Author: Mark Thomas <[email protected]>
AuthorDate: Thu Jan 8 17:48:19 2026 +0000
Fix a compilation warning
---
native/src/sslutils.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/native/src/sslutils.c b/native/src/sslutils.c
index dac911f88..ddcd2816d 100644
--- a/native/src/sslutils.c
+++ b/native/src/sslutils.c
@@ -1001,7 +1001,7 @@ static int process_ocsp_response(OCSP_REQUEST *ocsp_req,
OCSP_RESPONSE *ocsp_res
OCSP_CERTID *certid;
ASN1_GENERALIZEDTIME *thisupd;
ASN1_GENERALIZEDTIME *nextupd;
- STACK_OF(X509) *certStack;
+ const STACK_OF(X509) *certStack;
r = OCSP_response_status(ocsp_resp);
@@ -1017,7 +1017,8 @@ static int process_ocsp_response(OCSP_REQUEST *ocsp_req,
OCSP_RESPONSE *ocsp_res
}
certStack = OCSP_resp_get0_certs(bs);
- if (OCSP_basic_verify(bs, certStack, X509_STORE_CTX_get0_store(ctx),
verifyFlags) <= 0) {
+ // Cast to non-const pointer is OK here since OCSP_basic_verify does not
modify the provided certs
+ if (OCSP_basic_verify(bs, (STACK_OF(X509) *)certStack,
X509_STORE_CTX_get0_store(ctx), verifyFlags) <= 0) {
X509_STORE_CTX_set_error(ctx, X509_V_ERR_OCSP_SIGNATURE_FAILURE);
o = OCSP_STATUS_UNKNOWN;
goto clean_bs;
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
