On Apr 20, 2014, at 4:39 PM, Vilmos Nebehaj <v.nebehaj_at_gmail.com> wrote:

> attached a patch which implements --cacert when cURL is compiled with
> darwinssl support (Security Framework on Mac OS X).

I've skimmed over it, and I'm reluctant to include it in the next point release, mainly because this is a huge change to secure code used by millions of people[1], and we've already learned in the past two months how a single line in supposedly secure code can cause a huge security hole (see "goto fail" and Heartbleed).

We ought to consider this for a future release, though. Thanks for the patch.

Nick Zitzmann
<http://www.chronosnet.com/>

[1] seriously, it's a core component of OS X starting in Mavericks

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-04-23