cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: Properly Implementing a Patch for CAINFO / ISSUERCERT

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 19 Jun 2012 11:23:55 +0200 (CEST)

On Tue, 19 Jun 2012, Peter Sylvester wrote:

> You can use the ssl initialisation callback, decode the cert in you main
> program, set the ssl callback parameter, and in the callback add it to the
> trust STORE. no bio, no pem, just d2i_x509.

The problem with that approach is that it assumes libcurl built with OpenSSL,
while a libcurl API that takes something else than files as input can be made
SSL library agnostic.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2012-06-19