maskit opened a new pull request, #9591: URL: https://github.com/apache/trafficserver/pull/9591
This is a step to support OCSP, without boringocsp library that has never been open sourced. ATS has been using `OCSP_REQ_CTX` and related functions, which makes HTTP requests for OCSP, but many of them were deprecated on OpenSSL 3.0 and they are unavailable on BoringSSL. On this PR, I replaced those functions with ATS's FetchSM and functions that are available on BoringSSL. It still doesn't work with BoringSSL because there are still other functions only available on OpenSSL. I'm going to replace them on next PR. Changes on FetchSM are needed because the HTTP requests are made on ET_OCSP thread and the requests can be made before FetchSM gets ready. It should not affect existing plugins because those won't run until everything is initialized. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
