[cpp-sp] branch main updated: Conditionals for old curl versions.

Codeberg noreply at shibboleth.net
Wed Oct 21 13:24:48 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository cpp-sp.

View the commit online:
https://codeberg.org/Shibboleth/cpp-sp/commit/8e623c33d269d9b69db8caebbad720c99e763686

The following commit(s) were added to refs/heads/main by this push:
     new 8e623c33 Conditionals for old curl versions.
8e623c33 is described below

commit 8e623c33d269d9b69db8caebbad720c99e763686
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Wed Oct 21 09:23:02 2026 -0400

    Conditionals for old curl versions.
---
 shibsp/remoting/impl/CurlHTTPRemotingService.cpp | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/shibsp/remoting/impl/CurlHTTPRemotingService.cpp b/shibsp/remoting/impl/CurlHTTPRemotingService.cpp
index aa8090c8..4bcee051 100644
--- a/shibsp/remoting/impl/CurlHTTPRemotingService.cpp
+++ b/shibsp/remoting/impl/CurlHTTPRemotingService.cpp
@@ -261,13 +261,19 @@ CURL* CurlHTTPRemotingService::checkout() const
     if (!getTLS12Ciphers().empty()) {
         SHIB_CURL_SET(CURLOPT_SSL_CIPHER_LIST, getTLS12Ciphers().c_str());
     }
+#ifdef CURLOPT_TLS13_CIPHERS
     if (!getTLS13Ciphers().empty()) {
         SHIB_CURL_SET(CURLOPT_TLS13_CIPHERS, getTLS13Ciphers().c_str());
     }
+#endif
 
     if (isDisableTLS12()) {
         // Implies from base class that 1.3 is enabled...
+#ifdef CURL_SSLVERSION_TLSv1_3
         SHIB_CURL_SET(CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_3);
+#else
+        m_log.crit("option to disable TLS 1.2 ignored, TLS 1.3 not supported by libcurl");
+#endif
     }
     else if (isDisableTLS13()) {
         // Implies from above, and base class, that 1.2 is enabled...

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list