On Wed, Jan 14, 2026 at 12:47 PM <[email protected]> wrote:
>
> This is an automated email from the ASF dual-hosted git repository.
>
> remm pushed a commit to branch main
> in repository https://gitbox.apache.org/repos/asf/tomcat.git
>
>
> The following commit(s) were added to refs/heads/main by this push:
> new cbae661005 Revert since my LibreSSL 4 works fine for me locally
> cbae661005 is described below
>
> commit cbae6610057a300eb7bb29bfbd79505f575c8acb
> Author: remm <[email protected]>
> AuthorDate: Wed Jan 14 12:47:20 2026 +0100
>
> Revert since my LibreSSL 4 works fine for me locally
>
> Probably special handling is needed for GitHub CI.
I found stuff to fix ...
OCSP is actually only supported in LibreSSL > 3.5.0, which I didn't
know about before. Also when the test crashes like this, the OpenSSL
responder remains and needs to be killed manually (not sure if this is
worth fixing since I will fix the crash).
Rémy
> ---
> java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git
> a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
> b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
> index ccae22e937..69fb642a86 100644
> --- a/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
> +++ b/java/org/apache/tomcat/util/net/openssl/panama/OpenSSLEngine.java
> @@ -1300,7 +1300,7 @@ public final class OpenSSLEngine extends SSLEngine
> implements SSLUtil.ProtocolIn
>
> private static int processOCSPRequest(EngineState state, URL url,
> MemorySegment issuer, MemorySegment x509,
> MemorySegment /* X509_STORE_CTX */ x509ctx, Arena localArena) {
> - if (openssl_h_Compatibility.BORINGSSL ||
> openssl_h_Compatibility.LIBRESSL) {
> + if (openssl_h_Compatibility.BORINGSSL) {
> return V_OCSP_CERTSTATUS_UNKNOWN();
> }
> MemorySegment ocspRequest = MemorySegment.NULL;
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
