curl / Mailing Lists / curl-library / Single Mail

Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: Programmatically provide CA bundle?

From: Tom N via curl-library <curl-library_at_cool.haxx.se>
Date: Tue, 28 Apr 2020 13:12:51 -0400 (EDT)

> On April 28, 2020 at 11:44 AM Daniel Stenberg <daniel_at_haxx.se> wrote:
>
> Maybe like the cacertinmem.c example?https://curl.haxx.se/libcurl/c/cacertinmem.html

Thank you! (Not sure why I didn't find that.)

> You will of course still have to make sure that you have the current set of certs in there.

Right, I was planning to use "openssl s_client -showcerts -servername server -connect server:443 > cacert.pem" as described at https://curl.haxx.se/docs/sslcerts.html, and possibly adding some of the more popular certs for a bit of future-proofing.
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2020-04-28

This message: [ Message body ]
Next message: Blake Burkhart via curl-library: "Security implications of CURLOPT_UPLOAD + CURLOPT_FOLLOWLOCATION"
Previous message: Daniel Stenberg via curl-library: "webinar next week: common libcurl mistakes"
In reply to: Daniel Stenberg via curl-library: "Re: Programmatically provide CA bundle?"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]