mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-06-26 09:17:00 -04:00
Code Issues Packages Projects Releases Wiki Activity

http: Reset curl TLS options between transfers

Browse Source 
Previously the curl object potentially leaked cert infos from different
urls
This commit is contained in:
Kolja Lampe
2026-06-12 14:53:27 +02:00
committed by Sebastian Wick
parent 8ac2adefce
commit 420ce91428
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
common/flatpak-utils-http.c
View File

@@ -627,6 +627,10 @@ flatpak_download_http_uri_once (FlatpakHttpSession *session,
curl_easy_setopt (curl, CURLOPT_WRITEDATA, (void *)data);
curl_easy_setopt (curl, CURLOPT_HEADERDATA, (void *)data);
curl_easy_setopt (curl, CURLOPT_CAINFO, NULL);
curl_easy_setopt (curl, CURLOPT_SSLCERT, NULL);
curl_easy_setopt (curl, CURLOPT_SSLKEY, NULL);
if (data->certificates)
{
if (data->certificates->ca_cert_file)