tree 5e005c02958a4f4a03ca5482f54cef5951c31573
parent 25907fd5ba7a28d674b2c0b5e25123c6600a2cde
author Stefan Eissing <stefan@eissing.org> 1693982142 +0200
committer Daniel Stenberg <daniel@haxx.se> 1694096328 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQFDBAABCgAtFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmT52/APHGRhbmllbEBo
 YXh4LnNlAAoJEFzJCP23HhLCugoH+gMLx/J0aOPn6HVnXvhgML4dFAtqAszIWP0+
 Lm5xHrakOLo0nAXWwkB+b5XeLC9PwfaKPOf07kdtBVOOK6o67Bv3DnLj/+lyPI6v
 1LFgf7LVQLUn6kj9AjLNRvK9fMf07kmR8njNBlGo3E6EUhIpfLBXpBaQBOO2zAZr
 k2qA9ROPiu7R+/ss5qP3AXww6CeEWP2L5rvruyrFV2bl4b/FmXZHLsARIz5pfyHp
 T1LACPTFapzeZ/JmIs37Q7pqw+GxmDMkL2VqP/dnI+XlhwCd5HY3kuiVqsIK9vQz
 Lra/UauLctnAirxMUeqwDO4WPBvGSeVd3fHd+imWeHvVWhNNyfA=
 =c6gQ
 -----END PGP SIGNATURE-----

openssl: when CURLOPT_SSL_CTX_FUNCTION is registered, init x509 store before

- we delay loading the x509 store to shorten the handshake time.
  However an application callback installed via CURLOPT_SSL_CTX_FUNCTION
  may need to have the store loaded and try to manipulate it.
- load the x509 store before invoking the app callback

Fixes #11800
Reported-by: guoxinvmware on github
Cloes #11805