cURL / Mailing Lists / curl-library / Single Mail

curl-library

RE: https and certificates

From: Andreas Olsson <andreas.olsson_at_ctakt.com>
Date: Tue, 28 May 2002 09:23:13 +0200

>> Today my client program is hardcoded with a specific CaCertFile
>>
>> curl_easy_setopt(curl,CURLOPT_CAINFO,pCACertFile);
>>
>> This is ok as long as I know what certificate the server uses.
>>
>> Is it possible to specify a directory containing many cert files or to
>> bundle them all together in one large cert file and give that to libcurl?

>This is currently not possible. I would gladly accept a patch what would
>introduce CURLOPT_CAPATH that would then set the OpenSSL 'CApath'
>accordingly, the same way CURLOPT_CAINFO currently sets 'CAfile'.

>Would you be able to write us a patch for this?

At the moment I'm going for the suggestion from Bharath, bundling the CA
certs into one file, because I want my program to work on windows. In the
future, when I've got more time (yeah sure..) and I know CApath works on
Windows, then I'd be happy to write a patch.

Regards
Andreas

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
Received on 2002-05-28