On Tue, 5 Aug 2008, Scoped Ptr wrote:

> I am using libcurl for SSL communication with OpenSSL. Since libcurl uses
> ca-certificates for peer certificate verification. I want to know whether
> libcurl depends on ca-certificate or the user needs to install it manually
> to get SSL support?

libcurl can be told to not use a ca-certificate bundle, or it can use one. It
does use one by default. Which one it defaults to (the path for it) is decided
at compile-time, but the path can always be set by the application using
libcurl.

You decide what cacert bundle to use. curl doesn't include any ca-certificates
in its release archives since a while back, but it used to ship a set of
terribly outdated ones.

libcurl will of coruse require a ca certificate bundle to do secure SSL
connections.

I hope this answers the question.

-- 
  / daniel.haxx.se