Temp

lib/vtls/mbedtls.c

@@ -746,6 +746,8 @@ mbed_connect_step1(struct Curl_cfilter *cf, struct Curl_easy *data)
  return CURLE_OK;
 }
 
+#if 0
+
 static int count_server_cert(const mbedtls_x509_crt *peercert)
 {
  int count = 1;
@@ -804,6 +806,8 @@ static CURLcode collect_server_cert(struct Curl_cfilter *cf,
  return result;
 }
 
+#endif
+
 static CURLcode
 mbed_connect_step2(struct Curl_cfilter *cf, struct Curl_easy *data)
 {
@@ -867,12 +871,6 @@ mbed_connect_step2(struct Curl_cfilter *cf, struct Curl_easy *data)
 
  peercert = mbedtls_ssl_get_peer_cert(&backend->ssl);
 
- if(peercert) {
- const CURLcode result = collect_server_cert(cf, data, peercert);
- if(result)
- return result;
- }
-
  if(peercert && data->set.verbose) {
 #ifndef MBEDTLS_X509_REMOVE_INFO
  const size_t bufsize = 16384;
@@ -1383,7 +1381,6 @@ const struct Curl_ssl Curl_ssl_mbedtls = {
 
  SSLSUPP_CA_PATH |
  SSLSUPP_CAINFO_BLOB |
- SSLSUPP_CERTINFO |
  SSLSUPP_PINNEDPUBKEY |
  SSLSUPP_SSL_CTX |
  SSLSUPP_HTTPS_PROXY,

tests/data/test3102

@@ -20,6 +20,7 @@ HTTP GET
 <features>
 SSL
 !bearssl
+!mbedtls
 !rustls
 !wolfssl
 </features>