I compiled curl against OpenSSL statically on Win32 and
deployed the curl.EXE onto another computer.
To my surprise,
it worked immediately with HTTPS servers without any CA certificate files.
AFAIK the server certificates are signed by CA's and can only be
read by clients that has the public key of the particular CA.
Where the hell my Curl.exe got these CA public keys from?
Are they (statically) stored in the libraries as Win32 resources?
What am I missing?
 
Thanks for your help,
 
Miklos
Received on 2001-11-27