From 14ebcd4881ae9f007a315c18864aa91161f60949 Mon Sep 17 00:00:00 2001 From: Luke Wilde Date: Fri, 28 Feb 2025 16:22:57 +0000 Subject: [PATCH] vcpkg: Explicitly use OpenSSL backend with curl The generic `ssl` feature selects Secure Transport on macOS, which is a deprecated library and support for it in curl is also deprecated and scheduled for removal after May 2025: https://daniel.haxx.se/blog/tag/securetransport/ Secure Transport is replaced by Network Framework, but as per the blog post above, there's no foreseeable future of curl supporting it. With this information, we now explicitly use OpenSSL as the backend for curl, inline with the default choice for Linux. This gives us some key benefits: - A maintained and current TLS library - TLS 1.0 and 1.1 is disabled by default - TLS 1.3 is now available - Modern cipher suites - Removal of TLS_EMPTY_RENEGOTIATION_INFO_SCSV extension - Opportunity to support HTTP/3 with nghttp3 and OpenSSL's QUIC support - More extensions, key exchanges, EC point formats, etc. --- vcpkg.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vcpkg.json b/vcpkg.json index 19f1f59e04..2102a2c493 100644 --- a/vcpkg.json +++ b/vcpkg.json @@ -10,7 +10,7 @@ "features": [ "brotli", "http2", - "ssl", + "openssl", "websockets" ] },