mirror of
https://github.com/lexmount/moli.git
synced 2026-09-23 00:01:25 +00:00
ldm0
40917fccee
Pin the curl-rust build that enables libcurl's Apple SecTrust verifier with the existing AWS-LC TLS backend. Leave default CA options unset so macOS trust comes from the operating system rather than an automatically discovered certificate file. Preserve explicit CA files and certificate environment overrides for origins and HTTPS proxies, including explicit-file precedence over SSL_CERT_DIR. Keep other platforms' existing trust configuration. Add macos-latest CI coverage for local HTTPS, WSS, and HTTPS proxy handshakes, including native-verifier diagnostics, rejected certificates and hostnames, and CA overrides. Use distinct CA and server identities, blocking accepted sockets, and bounded fixture commands. Exercise the generated chains, nonblocking socket transition, and process deadlines in portable regression tests. Validated on Linux with cargo fmt --all, workspace Clippy with all targets and features, and cargo nextest run --no-fail-fast: 18447 passed, 14 skipped. macOS-specific checks run in CI. Refs #701