cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: CA Path Defaults across OSs

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 18 Aug 2009 13:49:40 +0200 (CEST)

On Tue, 18 Aug 2009, A_Venkatachalam_at_dell.com wrote:

> While working with LibCURL libraries across Operating Systems mainly SLES
> and RHEL I am seeing that the Default path used by LibCURL for CA
> certificate files is not consistent. In RHEL, LibCURL is able to use a
> default path /etc/pki/tls/certs/ca-bundle.crt while searching for a CA cert;
> where as in SLES11 it tries to use the current default path from where the
> Application is executing if CURLOPT_CAPATH is not mentioned.
>
> Is this an expected behavior of LibCURL? or is there a default path where
> CURL will look for the certificate files?

When libcurl is built, it checks a few known paths to see where it might find
the default ca-cert for that system. That will then be used as default ca cert
path. If you want something that is more specific, you should use the provided
options.

-- 
  / daniel.haxx.se
Received on 2009-08-18