Buy commercial curl support from WolfSSL. We help you work
out your issues, debug your libcurl applications, use the API, port to new
platforms, add new features and more. With a team lead by the curl founder
himself.
Re: How to handle CA certificate bundles in portable application bundles (e.g., AppImages)?
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Estevon Colon via curl-library <curl-library_at_lists.haxx.se>
Date: Thu, 2 Jun 2022 00:28:02 -0400
Stop
On Wed, Jun 1, 2022, 7:34 PM TheAssassin via curl-library <
curl-library_at_lists.haxx.se> wrote:
> On 20.05.22 08:59, Daniel Stenberg via curl-library wrote:> Maybe this?
> >
> > https://github.com/curl/curl/pull/8888
>
> Had a look at it. This covers part of what I need. Thanks!
>
> For my current use case (that is, zsync2/AppImageUpdate), I will just
> copy the CA search path from the CMake/configure scripts for now, and
> add the queried value if available, since I need to make this work. This
> approach should work at least for a majority of distributions. I added
> an SSL_CERT_FILE environment variable as a fallback, too.
>
> One thing that would be nice to have as well is to compile in the value
> used in CURL_CA_BUNDLE_AUTODETECT and expose it via the API as well.
> This would allow applications to benefit from the list without having to
> maintain it themselves.
>
> Thanks everyone for the feedback and for the quick addition to libcurl!
> --
> Unsubscribe: https://lists.haxx.se/listinfo/curl-library
> Etiquette: https://curl.haxx.se/mail/etiquette.html
>
Date: Thu, 2 Jun 2022 00:28:02 -0400
Stop
On Wed, Jun 1, 2022, 7:34 PM TheAssassin via curl-library <
curl-library_at_lists.haxx.se> wrote:
> On 20.05.22 08:59, Daniel Stenberg via curl-library wrote:> Maybe this?
> >
> > https://github.com/curl/curl/pull/8888
>
> Had a look at it. This covers part of what I need. Thanks!
>
> For my current use case (that is, zsync2/AppImageUpdate), I will just
> copy the CA search path from the CMake/configure scripts for now, and
> add the queried value if available, since I need to make this work. This
> approach should work at least for a majority of distributions. I added
> an SSL_CERT_FILE environment variable as a fallback, too.
>
> One thing that would be nice to have as well is to compile in the value
> used in CURL_CA_BUNDLE_AUTODETECT and expose it via the API as well.
> This would allow applications to benefit from the list without having to
> maintain it themselves.
>
> Thanks everyone for the feedback and for the quick addition to libcurl!
> --
> Unsubscribe: https://lists.haxx.se/listinfo/curl-library
> Etiquette: https://curl.haxx.se/mail/etiquette.html
>
-- Unsubscribe: https://lists.haxx.se/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.htmlReceived on 2022-06-02