cURL / Mailing Lists / curl-library / Single Mail

curl-library

RE: VerifyPeer in OpenSSL vs DarwinSSL

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Fri, 18 Mar 2016 22:26:12 +0100 (CET)

On Fri, 18 Mar 2016, JOHAN LANTZ wrote:

> 1. In Android there is around 150 certificates (amounting to around 25k of
> data). In my case I will know which is the relevant one. Does it make sense
> to ensure this certificate is prepended in the list so you find it first?

I don't know how OpenSSL uses that list internally so I have no idea if that
makes any difference or not.

> 2. Is this verification cached somehow in libcurl? From what I can see I
> assign it per easy handle but all my communication is towards the same
> server how does it work? I assume you keep the connection alive somehow but
> how

You keep connections alive by reusing the easy handle for subsequent
transfers. On and on untiĺ you're done.

-- 
  / daniel.haxx.se

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2016-03-18