Dear all,

Openssl defines a flag, -trusted_first, which causes it to verify
certificates using a trusted certificate store, even if an untrusted
store is also available. This is described in a patch at
<http://marc.info/?l=openssl-cvs&m=126710063626226>.

I've created a patch for cURL that adds a --trusted_first flag, allowing
(lib)curl to use this openssl functionality.

It's probably not perfect, and I haven't updated all the man pages and
help, but it seems to work and I hope it's useful.

The patch applies cleanly to cURL 7.23.1.

Rob Foreman

-- 
Rob Foreman
BBC Future Media & Technology
D221 Centre House, 56 Wood Lane, LONDON W12 7SB
+44 303 040 9587
robert.foreman_at_rd.bbc.co.uk

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html