Re: How to build curl against Apple LibreSSL

This is so cool, thank you for doing this! Does it support TLS 1.3/ECH? If
so, that is a big improvement over the default SecureTransport.

I tried to add a Network.framework SSL backend to curl here:
https://github.com/conradev/curl. It was a bigger endeavour than I had
originally thought because it involves a new socket abstraction, but I
think it could still be possible to get working. I unfortunately don't have
time to continue working on it, but it's a starting point.


Conrad

On Thu, May 29, 2025 at 5:00 AM Jeroen Ooms via curl-library <
[email protected]> wrote:

> Perhaps someone else finds this useful: I made some notes and files on
> how to build curl against the stock LibreSSL and nghttp2 included with
> MacOS. This way your curl build matches the configuration of the stock
> curl from MacOS and needs no dependencies:
> https://github.com/jeroen/apple-libressl-sdk
>
> Apple made this unnecessarily complicated by not publishing their
> LibreSSL modifications nor providing the required SDK files to link
> with their custom LibreSSL, and on top of that shipping a pretty buggy
> curl version themselves.
>
> One reason why you may want this is when your keychain trust store
> contains custom certificates, which standard openssl/libressl backends
> do not support.
> --
> Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
> Etiquette:   https://curl.se/mail/etiquette.html
>

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html