On Wed, 21 Sep 2016, Nima Sadjadi wrote:

> 1. cURL has its own openssl bundle or it relies on openssl extension that
> must be installed separately?

I assume you with "openssl bundle" mean a CA bundle or CA store?

OpenSSL does not ship any CA bundle of its own and neither does the curl
project. You can however download the Mozilla CA bundle, converted to PEM from
here: https://curl.haxx.se/docs/caextract.html

Most linux distributions ship its own CA store separately already.

curl built to use the native Windows or Mac OS TLS backends will use the
operating system's native trust stores instead.

> 2. On *nix servers it gets CA bundle included in libcurl itself or it uses
> openssl to get CA bundle?

Neither libcurl nor openssl provide such a CA bundle. See above.

-- 
  / daniel.haxx.se
_______________________________________________
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-and-php