Hi,

When built with NSS, and if libnsspem.so is available, curl can handle PEM-formatted cert files. I'd like to use the "regular" NSS cert storage alone, but this is difficult as if a CA bundle is available, curl will load it, and use it in addition to the NSS DB.

I'm able to work around this behavior by passing NULL to CURLOPT_CAINFO so nothing is loaded, but this only works when I'm using libcurl. Is there some way to not load any PEM files when using the curl command line? Alternately, and perhaps even better, is there a way to disable libnsspem.so altogether (perhaps via the pkcs11.txt config file?)

Thanks,

David
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-01-18