curl-library
Re: Latest PEM file is not trusting yahoo.com and many other sites.
From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 9 Dec 2014 10:34:24 +0100 (CET)
Date: Tue, 9 Dec 2014 10:34:24 +0100 (CET)
On Tue, 9 Dec 2014, Arif Ali wrote:
> I have also tried mk-ca-bundle tool and created a latest pem file but result
> is same.
Well of course, as the site is using that.
If you include the "MUST_VERIFY_TRUST" certs (with -p) you probably get more
certs included, but yeah then you include certs that have a lesser degree of
trust according to the bits in the bundle.
-- / daniel.haxx.se ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.htmlReceived on 2014-12-09